Computrols vulnerabilities

Products

• Building Automation Software 9

Newest

• computrols building automation software Computrols CBAS 18.0.0 allows Cross-Site Request Forgery. CVE-2019-10847 Public exploit 8.8 HighMay 24, 2019
• computrols building automation software Computrols CBAS 18.0.0 allows Username Enumeration. CVE-2019-10848 Public exploit 5.3 MediumMay 24, 2019
• computrols building automation system Computrols CBAS 18.0.0 allows Unauthenticated Reflected Cross-Site Scripting vulnerabilities in... CVE-2019-10846 Public exploit 6.1 MediumMay 23, 2019
• computrols building automation software Computrols CBAS 18.0.0 allows unprotected Subversion (SVN) directory / source code disclosure. CVE-2019-10849 Public exploit 7.5 HighMay 23, 2019
• computrols building automation software Computrols CBAS 18.0.0 has Default Credentials. CVE-2019-10850 9.8 CriticalMay 23, 2019
• computrols building automation software Computrols CBAS 18.0.0 has hard-coded encryption keys. CVE-2019-10851 6.5 MediumMay 23, 2019
• computrols building automation software Computrols CBAS 18.0.0 allows Authenticated Blind SQL Injection via the id GET parameter, as... CVE-2019-10852 8.8 HighMay 23, 2019
• computrols building automation software Computrols CBAS 18.0.0 allows Authentication Bypass. CVE-2019-10853 8.1 HighMay 23, 2019
• computrols building automation software Computrols CBAS 18.0.0 allows Authenticated Command Injection. CVE-2019-10854 8.8 HighMay 23, 2019
• computrols building automation software Computrols CBAS 18.0.0 mishandles password hashes. The approach is MD5 with a pw prefix, e.g., if... CVE-2019-10855 7.5 HighMay 23, 2019