CVE-2020-7499: Schneider Electric MTN6260-0310 Firmware

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

A CWE-863: Incorrect Authorization vulnerability exists in U.motion Servers and Touch Panels (affected versions listed in the security notification) which could cause unauthorized access when a low privileged user makes unauthorized changes.

Affected products

• Schneider Electric MTN6260-0310 Firmware: before 1.4.2 (fixed in 1.4.2)
• Schneider Electric MTN6260-0315 Firmware: before 1.4.2 (fixed in 1.4.2)
• Schneider Electric MTN6260-0410 Firmware: before 1.4.2 (fixed in 1.4.2)
• Schneider Electric MTN6260-0415 Firmware: before 1.4.2 (fixed in 1.4.2)
• Schneider Electric MTN6501-0001 Firmware: before 1.4.2 (fixed in 1.4.2)
• Schneider Electric MTN6501-0002 Firmware: before 1.4.2 (fixed in 1.4.2)

Published 2020-06-16. Last modified 2026-06-17.