Schneider-electric Meg6501-0001 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Schneider-electric Meg6501-0001 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2019-6840 — CVSS 9.8 (critical): A Format String: CWE-134 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server…
• CVE-2019-6837 — CVSS 9.1 (critical): A Server-Side Request Forgery (SSRF): CWE-918 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 -…
• CVE-2019-6839 — CVSS 8.8 (high): A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server…
• CVE-2019-6836 — CVSS 7.5 (high): A CWE-863: Incorrect Authorization vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX…
• CVE-2019-6838 — CVSS 6.5 (medium): A CWE-863: Incorrect Authorization vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX…
• CVE-2019-6835 — CVSS 5.4 (medium): A Cross-Site Scripting (XSS) CWE-79 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion…