ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2020-7500

—
CVSS 3.1
9.8 critical
EPSS
2%p78
Published
()
Modified
Description

A CWE-89:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability exists in U.motion Servers and Touch Panels (affected versions listed in the security notification) which could cause arbitrary code to be executed when a malicious command is entered.

Vendors
schneider-electric
Products
mtn6501-0001 firmware, mtn6501-0002 firmware, mtn6260-0410 firmware, mtn6260-0415 firmware, mtn6260-0310 firmware, mtn6260-0315 firmware
Weakness
CWE-89
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (1.9%)

In the news

No ingested article mentions this CVE yet.