CO
Vendor
Computrols
10
CVEs
0
On KEV
0
New 30D
Products
CB9.8
Computrols Building Automation Software
Computrols
9 CVEs0 on KEV0 new
CB6.1
Computrols Building Automation System
Computrols
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2019-10848 | CB Computrols Building Automation Software Computrols | 5.3 | May 24 | Computrols CBAS 18.0.0 allows Username Enumeration |
| CVE-2019-10847 | CB Computrols Building Automation Software Computrols | 8.8 | May 24 | Computrols CBAS 18.0.0 allows Cross-Site Request Forgery |
| CVE-2019-10850 | CB Computrols Building Automation Software Computrols | 9.8 | May 23 | Computrols CBAS 18.0.0 has Default Credentials |
| CVE-2019-10849 | CB Computrols Building Automation Software Computrols | 7.5 | May 23 | Computrols CBAS 18.0.0 allows unprotected Subversion (SVN) directory / source code disclosure |
| CVE-2019-10846 | CB Computrols Building Automation System Computrols | 6.1 | May 23 | Computrols CBAS 18.0.0 allows Unauthenticated Reflected Cross-Site Scripting vulnerabilities in the login page and password reset page via the username GET parameter |
| CVE-2019-10855 | CB Computrols Building Automation Software Computrols | 7.5 | May 23 | Computrols CBAS 18.0.0 mishandles password hashes |
| CVE-2019-10854 | CB Computrols Building Automation Software Computrols | 8.8 | May 23 | Computrols CBAS 18.0.0 allows Authenticated Command Injection |
| CVE-2019-10853 | CB Computrols Building Automation Software Computrols | 8.1 | May 23 | Computrols CBAS 18.0.0 allows Authentication Bypass |
| CVE-2019-10852 | CB Computrols Building Automation Software Computrols | 8.8 | May 23 | Computrols CBAS 18.0.0 allows Authenticated Blind SQL Injection via the id GET parameter, as demonstrated by the index.php?m=servers&a=start_pulling&id= substring |
| CVE-2019-10851 | CB Computrols Building Automation Software Computrols | 6.5 | May 23 | Computrols CBAS 18.0.0 has hard-coded encryption keys |