CVE-2020-7499
Medium
Description
A CWE-863: Incorrect Authorization vulnerability exists in U.motion Servers and Touch Panels (affected versions listed in the security notification) which could cause unauthorized access when a low privileged user makes unauthorized changes.
SeverityMedium
CVSS6.5
Exploit probability—
ProductSchneider-electric Mtn6501-0001 Firmware
PublishedJun 16, 2020
First seenJun 16, 2020
Weakness typeCWE-863Incorrect authorization
How to fix
Update
- schneider-electric mtn6501-0001_firmware1.4.2 or later
- schneider-electric mtn6501-0002_firmware1.4.2 or later
- schneider-electric mtn6260-0410_firmware1.4.2 or later
- schneider-electric mtn6260-0415_firmware1.4.2 or later
- schneider-electric mtn6260-0310_firmware1.4.2 or later
- schneider-electric mtn6260-0315_firmware1.4.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| schneider-electric mtn6501-0001_firmware | v < 1.4.2 | 1.4.2 |
| schneider-electric mtn6501-0002_firmware | v < 1.4.2 | 1.4.2 |
| schneider-electric mtn6260-0410_firmware | v < 1.4.2 | 1.4.2 |
| schneider-electric mtn6260-0415_firmware | v < 1.4.2 | 1.4.2 |
| schneider-electric mtn6260-0310_firmware | v < 1.4.2 | 1.4.2 |
| schneider-electric mtn6260-0315_firmware | v < 1.4.2 | 1.4.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.