CB
Product
Computrols Building Automation Software
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 6Medium 2Low 0
Watch
Add Computrols Building Automation Software to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-10850 | 9.8 | May 23 | Computrols CBAS 18.0.0 has Default Credentials Affected: through 19.0.0 |
| CVE-2019-10847 | 8.8 | May 24 | Computrols CBAS 18.0.0 allows Cross-Site Request Forgery Affected: through 19.0.0 |
| CVE-2019-10854 | 8.8 | May 23 | Computrols CBAS 18.0.0 allows Authenticated Command Injection Affected: through 19.0.0 |
| CVE-2019-10852 | 8.8 | May 23 | Computrols CBAS 18.0.0 allows Authenticated Blind SQL Injection via the id GET parameter, as demonstrated by the index.php?m=servers&a=start_pulling&id= substring Affected: through 19.0.0 |
| CVE-2019-10853 | 8.1 | May 23 | Computrols CBAS 18.0.0 allows Authentication Bypass Affected: through 19.0.0 |
| CVE-2019-10849 | 7.5 | May 23 | Computrols CBAS 18.0.0 allows unprotected Subversion (SVN) directory / source code disclosure Affected: through 19.0.0 |
| CVE-2019-10855 | 7.5 | May 23 | Computrols CBAS 18.0.0 mishandles password hashes Affected: through 19.0.0 |
| CVE-2019-10851 | 6.5 | May 23 | Computrols CBAS 18.0.0 has hard-coded encryption keys Affected: through 19.0.0 |
| CVE-2019-10848 | 5.3 | May 24 | Computrols CBAS 18.0.0 allows Username Enumeration Affected: through 19.0.0 |
Showing 9