Skip to contentComputrols Building Automation Software vulnerabilities
- computrols building automation softwareComputrols CBAS 18.0.0 allows Cross-Site Request Forgery.CVE-2019-10847Public exploit8.8 High
- computrols building automation softwareComputrols CBAS 18.0.0 allows Username Enumeration.CVE-2019-10848Public exploit5.3 Medium
- computrols building automation softwareComputrols CBAS 18.0.0 allows unprotected Subversion (SVN) directory / source code disclosure.CVE-2019-10849Public exploit7.5 High
- computrols building automation softwareComputrols CBAS 18.0.0 has Default Credentials.CVE-2019-108509.8 Critical
- computrols building automation softwareComputrols CBAS 18.0.0 has hard-coded encryption keys.CVE-2019-108516.5 Medium
- computrols building automation softwareComputrols CBAS 18.0.0 allows Authenticated Blind SQL Injection via the id GET parameter, as...CVE-2019-108528.8 High
- computrols building automation softwareComputrols CBAS 18.0.0 allows Authentication Bypass.CVE-2019-108538.1 High
- computrols building automation softwareComputrols CBAS 18.0.0 allows Authenticated Command Injection.CVE-2019-108548.8 High
- computrols building automation softwareComputrols CBAS 18.0.0 mishandles password hashes. The approach is MD5 with a pw prefix, e.g., if...CVE-2019-108557.5 High