Filtered by vendor Schneider-electric Subscriptions
Filtered by product Mtn6260-0315 Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-7500 1 Schneider-electric 12 Mtn6260-0310, Mtn6260-0310 Firmware, Mtn6260-0315 and 9 more 2024-11-21 9.8 Critical
A CWE-89:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability exists in U.motion Servers and Touch Panels (affected versions listed in the security notification) which could cause arbitrary code to be executed when a malicious command is entered.
CVE-2020-7499 1 Schneider-electric 12 Mtn6260-0310, Mtn6260-0310 Firmware, Mtn6260-0315 and 9 more 2024-11-21 6.5 Medium
A CWE-863: Incorrect Authorization vulnerability exists in U.motion Servers and Touch Panels (affected versions listed in the security notification) which could cause unauthorized access when a low privileged user makes unauthorized changes.