kevinlab records

3 published records for vendor kevinlab.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
41Plan	CVE-2021-37291Proof of concept	An SQL Injection vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 ivia the input_id POST parameter in ikevinlab · 4st l-bems · CWE-89 Pre-auth SQL injection	Critical9.8	—	6.5%	Apr 11, 2022
30Monitor	CVE-2021-37292Proof of concept	An Access Control vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 due to an undocumented backdoor accokevinlab · 4st l-bems	High7.2	—	6.5%	Apr 11, 2022
26Monitor	CVE-2021-37293No exploit	A Directory Traversal vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 via the page GET parameter in inkevinlab · 4st l-bems · CWE-22 Path traversal	Medium6.5	—	1.4%	Apr 11, 2022

CVE-2021-37291
41Plan
An SQL Injection vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 ivia the input_id POST parameter in i
CriticalCVSS 9.8Proof of conceptEPSS 6%
- Pre-auth
- SQL injection
kevinlab · 4st l-bemsApr 11, 2022
CVE-2021-37292
30Monitor
An Access Control vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 due to an undocumented backdoor acco
HighCVSS 7.2Proof of conceptEPSS 6%
kevinlab · 4st l-bemsApr 11, 2022
CVE-2021-37293
26Monitor
A Directory Traversal vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 via the page GET parameter in in
MediumCVSS 6.5No exploitEPSS 1%
- Path traversal
kevinlab · 4st l-bemsApr 11, 2022