carel kayıtları
carel üreticisine ait 11 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-306 Missing Authentication for Critical Function2
- CWE-284 Improper Access Control1
- CWE-522 Insufficiently Protected Credentials1
- CWE-73 External Control of File Name or Path1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
11 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
62Bu hafta | CVE-2023-3643Kavram kanıtı | Boss Mini document file inclusioncarel · boss mini firmware · CWE-73 | Kritik9,8 | — | %75,3 | 12 Tem 2023 |
40Planlayın | CVE-2019-13553İstismar yok | Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4.carel · pcoweb firmware · CWE-798 | Kritik9,8 | — | %2,2 | 25 Eki 2019 |
39İzleyin | CVE-2022-34827İstismar yok | Carel Boss Mini 1.5.0 has Improper Access Control.carel · boss mini firmware · CWE-284 | Kritik9,9 | — | %0,8 | 18 Kas 2022 |
37İzleyin | CVE-2022-37122Kavram kanıtı | Carel pCOWeb HVAC BACnet Gateway 2.1.0, Firmware: A2.1.0 - B2.1.0, Application Software: 2.15.4A Software v16 13020200 suffers from an unautcarel · pcoweb card firmware · CWE-22 | Yüksek7,5 | — | %23,0 | 31 Ağu 2022 |
37İzleyin | CVE-2019-11369Kavram kanıtı | An issue was discovered in Carel pCOWeb prior to B1.2.4.carel · pcoweb card firmware · CWE-522 | Yüksek8,8 | — | %8,1 | 3 Haz 2019 |
31İzleyin | CVE-2016-0867İstismar yok | CAREL PlantVisorEnhanced allows remote attackers to bypass intended access restrictions via a direct file request.carel · plantvisor enhanced · CWE-200 | Yüksek7,5 | — | %2,1 | 30 Oca 2016 |
30İzleyin | CVE-2019-9484İstismar yok | The Glen Dimplex Deutschland GmbH implementation of the Carel pCOWeb configuration tool allows remote attackers to obtain access via an HTTPcarel · pcoweb card firmware · CWE-306 | Yüksek7,5 | — | %1,5 | 1 Mar 2019 |
30İzleyin | CVE-2019-13549İstismar yok | Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4.carel · pcoweb firmware · CWE-306 | Yüksek7,5 | — | %1,0 | 25 Eki 2019 |
30İzleyin | CVE-2020-18329İstismar yok | An issue was discovered in Rehau devices that use a pCOWeb card BIOS v6.27, BOOT v5.00, web version v2.2, allows attackers to gain full unaucarel · pcoweb card web · CWE-281 | Yüksek7,5 | — | %0,9 | 26 Oca 2023 |
22İzleyin | CVE-2011-3487Kavram kanıtı | Directory traversal vulnerability in CarelDataServer.exe in Carel PlantVisor 2.4.4 and earlier allows remote attackers to read arbitrary filcarel · plantvisor · CWE-22 | Orta5,0 | — | %7,4 | 16 Eyl 2011 |
22İzleyin | CVE-2019-11370Kavram kanıtı | Stored XSS was discovered in Carel pCOWeb prior to B1.2.4, as demonstrated by the config/pw_snmp.html "System contact" field.carel · pcoweb card firmware · CWE-79 | Orta5,4 | — | %4,9 | 3 Haz 2019 |
- CVE-2023-364362Bu hafta
Boss Mini document file inclusion
KritikCVSS 9,8Kavram kanıtıEPSS %75carel · boss mini firmware12 Tem 2023
- CVE-2019-1355340Planlayın
Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4.
KritikCVSS 9,8İstismar yokEPSS %2carel · pcoweb firmware25 Eki 2019
- CVE-2022-3482739İzleyin
Carel Boss Mini 1.5.0 has Improper Access Control.
KritikCVSS 9,9İstismar yokEPSS %0carel · boss mini firmware18 Kas 2022
- CVE-2022-3712237İzleyin
Carel pCOWeb HVAC BACnet Gateway 2.1.0, Firmware: A2.1.0 - B2.1.0, Application Software: 2.15.4A Software v16 13020200 suffers from an unaut
YüksekCVSS 7,5Kavram kanıtıEPSS %23carel · pcoweb card firmware31 Ağu 2022
- CVE-2019-1136937İzleyin
An issue was discovered in Carel pCOWeb prior to B1.2.4.
YüksekCVSS 8,8Kavram kanıtıEPSS %8carel · pcoweb card firmware3 Haz 2019
- CVE-2016-086731İzleyin
CAREL PlantVisorEnhanced allows remote attackers to bypass intended access restrictions via a direct file request.
YüksekCVSS 7,5İstismar yokEPSS %2carel · plantvisor enhanced30 Oca 2016
- CVE-2019-948430İzleyin
The Glen Dimplex Deutschland GmbH implementation of the Carel pCOWeb configuration tool allows remote attackers to obtain access via an HTTP
YüksekCVSS 7,5İstismar yokEPSS %1carel · pcoweb card firmware1 Mar 2019
- CVE-2019-1354930İzleyin
Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4.
YüksekCVSS 7,5İstismar yokEPSS %1carel · pcoweb firmware25 Eki 2019
- CVE-2020-1832930İzleyin
An issue was discovered in Rehau devices that use a pCOWeb card BIOS v6.27, BOOT v5.00, web version v2.2, allows attackers to gain full unau
YüksekCVSS 7,5İstismar yokEPSS %0carel · pcoweb card web26 Oca 2023
- CVE-2011-348722İzleyin
Directory traversal vulnerability in CarelDataServer.exe in Carel PlantVisor 2.4.4 and earlier allows remote attackers to read arbitrary fil
OrtaCVSS 5,0Kavram kanıtıEPSS %7carel · plantvisor16 Eyl 2011
- CVE-2019-1137022İzleyin
Stored XSS was discovered in Carel pCOWeb prior to B1.2.4, as demonstrated by the config/pw_snmp.html "System contact" field.
OrtaCVSS 5,4Kavram kanıtıEPSS %4carel · pcoweb card firmware3 Haz 2019