Schneider Electric MTN6260-0315 Firmware vulnerabilities

2 CVEs affecting Schneider Electric MTN6260-0315 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-7500, published 2020-06-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-7500, published 2020-06-16. Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days. A CWE-89:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability exists in U.motion Servers and Touch Panels (affected versions listed in the security…
CVE-2020-7499, published 2020-06-16. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. A CWE-863: Incorrect Authorization vulnerability exists in U.motion Servers and Touch Panels (affected versions listed in the security notification) which could cause unauthorized access when a low…