CVE-2019-6840 - OpenCVE

A Format String: CWE-134 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow an attacker to send a crafted message to the target server, thereby causing arbitrary commands to be executed.

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

AV:N/AC:L/Au:N/C:P/I:P/A:P

Vendors & Products
CPE Configurations

Vendors	Products
Schneider-electric	Meg6260-0410 Firmware Meg6260-0415 Firmware Meg6501-0002 Meg6260-0415 Meg6501-0002 Firmware Meg6501-0001 Firmware Meg6260-0410 Meg6501-0001

Configuration 1 [-]

AND

cpe:2.3:o:schneider-electric:meg6501-0001_firmware:*:*:*:*:*:*:*:*

cpe:2.3:o:schneider-electric:meg6501-0001:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:schneider-electric:meg6501-0002_firmware:*:*:*:*:*:*:*:*

cpe:2.3:o:schneider-electric:meg6501-0002:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:schneider-electric:meg6260-0410_firmware:*:*:*:*:*:*:*:*

cpe:2.3:o:schneider-electric:meg6260-0410:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND

cpe:2.3:o:schneider-electric:meg6260-0415_firmware:*:*:*:*:*:*:*:*

cpe:2.3:o:schneider-electric:meg6260-0415:-:*:*:*:*:*:*:*

References

Link	Resource
https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-253-01	Vendor Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: schneider

Published: 2019-09-17T19:19:36

Updated: 2019-09-17T19:19:36

Reserved: 2019-01-25T00:00:00

Link: CVE-2019-6840

JSON object: View

NVD Information

Status : Analyzed

Published: 2019-09-17T20:15:12.843

Modified: 2022-11-30T21:47:19.947

Link: CVE-2019-6840

JSON object: View

Redhat Information

No data.

CWE

CWE-134

{"containers": {"cna": {"affected": [{"product": "U.motion Server", "vendor": "Schneider Electric SE", "versions": [{"status": "affected", "version": "MEG6501-0001 - U.motion KNX server"}, {"status": "affected", "version": "MEG6501-0002 - U.motion KNX Server Plus"}, {"status": "affected", "version": "MEG6260-0410 - U.motion KNX Server Plus"}, {"status": "affected", "version": "Touch 10"}, {"status": "affected", "version": "MEG6260-0415 - U.motion KNX Server Plus"}, {"status": "affected", "version": "Touch 15"}]}], "descriptions": [{"lang": "en", "value": "A Format String: CWE-134 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow an attacker to send a crafted message to the target server, thereby causing arbitrary commands to be executed."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-134", "description": "Format String: CWE-134\u00a0", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2019-09-17T19:19:36", "orgId": "076d1eb6-cfab-4401-b34d-6dfc2a413bdb", "shortName": "schneider"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-253-01"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cybersecurity@schneider-electric.com", "ID": "CVE-2019-6840", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "U.motion Server", "version": {"version_data": [{"version_value": "MEG6501-0001 - U.motion KNX server"}, {"version_value": "MEG6501-0002 - U.motion KNX Server Plus"}, {"version_value": "MEG6260-0410 - U.motion KNX Server Plus"}, {"version_value": "Touch 10"}, {"version_value": "MEG6260-0415 - U.motion KNX Server Plus"}, {"version_value": "Touch 15"}]}}]}, "vendor_name": "Schneider Electric SE"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A Format String: CWE-134 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow an attacker to send a crafted message to the target server, thereby causing arbitrary commands to be executed."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Format String: CWE-134\u00a0"}]}]}, "references": {"reference_data": [{"name": "https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-253-01", "refsource": "CONFIRM", "url": "https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-253-01"}]}}}}, "cveMetadata": {"assignerOrgId": "076d1eb6-cfab-4401-b34d-6dfc2a413bdb", "assignerShortName": "schneider", "cveId": "CVE-2019-6840", "datePublished": "2019-09-17T19:19:36", "dateReserved": "2019-01-25T00:00:00", "dateUpdated": "2019-09-17T19:19:36", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:meg6501-0001_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "716CA99C-BB90-422B-9EAD-A066D48DE1E8", "versionEndExcluding": "1.3.7", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:meg6501-0001:-:*:*:*:*:*:*:*", "matchCriteriaId": "DB83620B-3DE0-405A-92F7-99E1B2150E75", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:meg6501-0002_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0D2468D0-D50D-4843-8620-CAD0F40E9329", "versionEndExcluding": "1.3.7", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:meg6501-0002:-:*:*:*:*:*:*:*", "matchCriteriaId": "CC12A2AA-C006-4606-981A-FE54C1EA3B3F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:meg6260-0410_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "DB404224-29BF-4440-963C-0734A51CE6D1", "versionEndExcluding": "1.3.7", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:meg6260-0410:-:*:*:*:*:*:*:*", "matchCriteriaId": "0936523A-B9CB-451E-BF5E-9E7020DA96A2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:meg6260-0415_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7C17C8F6-8C97-43D5-8ECE-7D9204F3C75D", "versionEndExcluding": "1.3.7", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:meg6260-0415:-:*:*:*:*:*:*:*", "matchCriteriaId": "F93C8296-5845-498A-964A-D650F45B27B6", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "A Format String: CWE-134 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow an attacker to send a crafted message to the target server, thereby causing arbitrary commands to be executed."}, {"lang": "es", "value": "Una Cadena de Formato: Se presenta una vulnerabilidad CWE-134 en U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), lo que podr\u00eda permitir a un atacante enviar un mensaje dise\u00f1ado hacia servidor de destino, causando de este modo comandos arbitrarios a ser ejecutados."}], "id": "CVE-2019-6840", "lastModified": "2022-11-30T21:47:19.947", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2019-09-17T20:15:12.843", "references": [{"source": "cybersecurity@se.com", "tags": ["Vendor Advisory"], "url": "https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-253-01"}], "sourceIdentifier": "cybersecurity@se.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-134"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-134"}], "source": "cybersecurity@se.com", "type": "Secondary"}]}