CVE-2020-7500
Status: ModifiedCritical (9.8)—
A CWE-89:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability exists in U.motion Servers and Touch Panels (affected versions listed in the security notification) which could cause arbitrary code to be executed when a malicious command is entered.
CVSS
- Version: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Base score: 9.8
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 1.90%
- Percentile among all scored CVEs: 79
- Score date: 10/6/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (6)
CWEs
- CWE-89
- CWE-89
References
Raw JSON (NVD)
Show
{
"id": "CVE-2020-7500",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 9.8,
"attackVector": "NETWORK",
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "cybersecurity@se.com",
"affectedData": [
{
"vendor": "n/a",
"product": "U.motion Servers and Touch Panels (affected versions listed in the security notification)",
"versions": [
{
"status": "affected",
"version": "U.motion Servers and Touch Panels (affected versions listed in the security notification)"
}
]
}
]
}
],
"published": "2020-06-16T20:15:14.863",
"references": [
{
"url": "https://www.se.com/ww/en/download/document/SEVD-2020-133-03/",
"tags": [
"Vendor Advisory"
],
"source": "cybersecurity@se.com"
},
{
"url": "https://www.se.com/ww/en/download/document/SEVD-2020-133-03/",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "cybersecurity@se.com",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A CWE-89:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability exists in U.motion Servers and Touch Panels (affected versions listed in the security notification) which could cause arbitrary code to be executed when a malicious command is entered."
},
{
"lang": "es",
"value": "Una CWE-89: Se presenta una vulnerabilidad de Neutralización Inapropiada de Elementos Especiales utilizados en un Comando SQL (\"SQL Injection'') en U.motion Servers and Touch Panels (versiones afectadas listadas en la notificación de seguridad) lo cual podrían causar una ejecución de código arbitraria cuando un comando malicioso es ingresado"
}
],
"lastModified": "2026-06-17T03:24:54.077",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:schneider-electric:mtn6501-0001_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B0B3DF18-FE18-4465-8223-8AF2B286746D",
"versionEndExcluding": "1.4.2"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:schneider-electric:mtn6501-0001:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "22E79A6F-C946-43A7-B492-7F3F8CFB18CC"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:schneider-electric:mtn6501-0002_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CF40C8EB-9735-43D5-A947-087EFE6AF6F8",
"versionEndExcluding": "1.4.2"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:schneider-electric:mtn6501-0002:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4B17C76A-749C-44DA-8144-51E4328C4768"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:schneider-electric:mtn6260-0410_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AB0811DB-2E4D-4A14-8F87-2C24189D352A",
"versionEndExcluding": "1.4.2"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:schneider-electric:mtn6260-0410:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7D91BDED-9BCF-473A-AB1B-824AA1EDE586"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:schneider-electric:mtn6260-0415_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E369B5A4-1F69-48C1-8C07-0E7C61683EDA",
"versionEndExcluding": "1.4.2"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:schneider-electric:mtn6260-0415:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "436B2EB8-6D93-41FF-BD6E-932D69C4E197"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:schneider-electric:mtn6260-0310_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0176D45B-9007-4558-8D72-B56454EB9733",
"versionEndExcluding": "1.4.2"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:schneider-electric:mtn6260-0310:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F046097B-B818-4775-A53D-B22F258CB255"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:schneider-electric:mtn6260-0315_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FD29EA41-FA54-45A7-BB61-76D6B1CEF5C4",
"versionEndExcluding": "1.4.2"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:schneider-electric:mtn6260-0315:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9DD21D34-FBBD-4645-8C60-42825281D0FE"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "cybersecurity@se.com"
}