Medium severity6.5NVD Advisory· Published Jun 16, 2020· Updated Jun 17, 2026
CVE-2020-7499
CVE-2020-7499
Description
A CWE-863: Incorrect Authorization vulnerability exists in U.motion Servers and Touch Panels (affected versions listed in the security notification) which could cause unauthorized access when a low privileged user makes unauthorized changes.
Affected products
8- cpe:2.3:o:schneider-electric:mtn6260-0310_firmware:*:*:*:*:*:*:*:*Range: <1.4.2
- cpe:2.3:o:schneider-electric:mtn6260-0315_firmware:*:*:*:*:*:*:*:*Range: <1.4.2
- cpe:2.3:o:schneider-electric:mtn6260-0410_firmware:*:*:*:*:*:*:*:*Range: <1.4.2
- cpe:2.3:o:schneider-electric:mtn6260-0415_firmware:*:*:*:*:*:*:*:*Range: <1.4.2
- cpe:2.3:o:schneider-electric:mtn6501-0001_firmware:*:*:*:*:*:*:*:*Range: <1.4.2
- cpe:2.3:o:schneider-electric:mtn6501-0002_firmware:*:*:*:*:*:*:*:*Range: <1.4.2
- Schneider Electric/U.motion Serversdescription
Patches
Vulnerability mechanics
References
1- www.se.com/ww/en/download/document/SEVD-2020-133-03/nvdVendor Advisory
News mentions
0No linked articles in our index yet.