Known Vulnerabilities for products from Computrols
Listed below are 10 of the newest known vulnerabilities associated with the vendor "Computrols".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2019-10855 json | Computrols CBAS 18.0.0 mishandles password hashes. The approach is MD5 with a pw prefix, e.g., if the password is admin, it w... | 7.5 - HIGH | 2019-05-23 | 2020-08-24 |
| CVE-2019-10854 json | Computrols CBAS 18.0.0 allows Authenticated Command Injection. | 8.8 - HIGH | 2019-05-23 | 2019-05-24 |
| CVE-2019-10853 json | Computrols CBAS 18.0.0 allows Authentication Bypass. | 8.1 - HIGH | 2019-05-23 | 2020-08-24 |
| CVE-2019-10852 json | Computrols CBAS 18.0.0 allows Authenticated Blind SQL Injection via the id GET parameter, as demonstrated by the index.php?m=... | 8.8 - HIGH | 2019-05-23 | 2019-11-12 |
| CVE-2019-10851 json | Computrols CBAS 18.0.0 has hard-coded encryption keys. | 6.5 - MEDIUM | 2019-05-23 | 2021-07-21 |
| CVE-2019-10850 json | Computrols CBAS 18.0.0 has Default Credentials. | 9.8 - CRITICAL | 2019-05-23 | 2019-05-24 |
| CVE-2019-10849 json | Computrols CBAS 18.0.0 allows unprotected Subversion (SVN) directory / source code disclosure. | 7.5 - HIGH | 2019-05-23 | 2020-08-24 |
| CVE-2019-10848 json | Computrols CBAS 18.0.0 allows Username Enumeration. | 5.3 - MEDIUM | 2019-05-24 | 2020-08-24 |
| CVE-2019-10847 json | Computrols CBAS 18.0.0 allows Cross-Site Request Forgery. | 8.8 - HIGH | 2019-05-24 | 2019-11-12 |
| CVE-2019-10846 json | Computrols CBAS 18.0.0 allows Unauthenticated Reflected Cross-Site Scripting vulnerabilities in the login page and password r... | 6.1 - MEDIUM | 2019-05-23 | 2020-07-13 |
Known software with vulnerabilities from Computrols
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Computrols | Computrols Building Automation System | 15.0.0 |