CVE:CVE-2020-7500
CNNVD:CNNVD-202006-1083
Schneider Electric U.Motion Builder等都是法国施耐德电气（Schneider Electric）公司的产品。Schneider Electric U.Motion Builder是一套建筑物智能管理系统。MTN6501-0001 – U.Motion – KNX Server是一款KNX（商业和家庭楼宇自动化的开放标准）服务器。MTN6501-0002 – U.Motion – KNX Server Plus是一款KNX（商业和家庭楼宇自动化的开放标准）服务器。
多款Schneider Electric产品中存在SQL注入漏洞。攻击者可利用该漏洞执行任意代码。以下产品及版本受到影响：MTN6501-0001 – U.Motion – KNX Server；MTN6501-0002 – U.Motion – KNX Server Plus；MTN6260-0410 – U.Motion KNX server Plus, Touch 10；MTN6260-0415 – U.Motion KNX server Plus, Touch 15；MTN6260-0310 – U.Motion KNX Client Touch 10；MTN6260-0315 – U.Motion KNX Client Touch 15。
solution:Upgrade schneider-electric mtn6501-0001_firmware to a higher version than 1.4.2,and avoid the version (,1.4.2); Upgrade schneider-electric mtn6501-0002_firmware to a higher version than 1.4.2,and avoid the version (,1.4.2); Upgrade schneider-electric mtn6260-0410_firmware to a higher version than 1.4.2,and avoid the version (,1.4.2); Upgrade schneider-electric mtn6260-0415_firmware to a higher version than 1.4.2,and avoid the version (,1.4.2); Upgrade schneider-electric mtn6260-0310_firmware to a higher version than 1.4.2,and avoid the version (,1.4.2); Upgrade schneider-electric mtn6260-0315_firmware to a higher version than 1.4.2,and avoid the version (,1.4.2)