PT-2020-6375 · Unknown · U.Motion Server+1

Published 2020-05-12 · Updated 2022-02-03 · CVE-2020-7499

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:S/C:P/I:C/A:N

Name of the Vulnerable Software and Affected Versions U.motion Servers and Touch Panels (affected versions not specified)

Description A vulnerability exists in U.motion Servers and Touch Panels related to incorrect authorization, which could allow unauthorized access when a low-privileged user makes unauthorized changes. This issue may enable a remote attacker to impact data integrity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

BDU:2021-04332

CVE-2020-7499

Affected Products

U.Motion Server

U.Motion Touch Panels

References · 9

• https://osv.dev/vulnerability/CVE-2020-7499 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-04332 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-7499 · Security Note
• https://se.com/ww/en/download/document/SEVD-2020-133-03 · Vendor Advisory
• https://t.me/cvenotify/13428 · Telegram Post
• https://t.me/cvenotify/4406 · Telegram Post
• https://t.me/cvenotify/26222 · Telegram Post
• https://download.schneider-electric.com/files?p_enDocType=Technical+leaflet&p_File_Name=SEVD-2020-133-03_U.motion_Servers_and_Touch_Panels_Notification_V1.2.pdf&p_Doc_Ref=SEVD-2020-133-03 · Note
• https://download.schneider-electric.com/files?p_enDocType=Technical+leaflet&p_File_Name=SEVD-2020-133-03_U.motion_Servers_and_Touch_Panels_Notification_V1.2.pdf&p_Doc_Ref=SEVD-2020-133-03 · Note