computrols kayıtları

computrols üreticisine ait 10 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

10 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
40Planlayın	CVE-2019-10850İstismar yok	Computrols CBAS 18.0.0 has Default Credentials.computrols · computrols building automation software · CWE-798 Kimlik doğrulamasız Gömülü kimlik bilgisi	Kritik9,8	—	%1,9	23 May 2019
36İzleyin	CVE-2019-10854İstismar yok	Computrols CBAS 18.0.0 allows Authenticated Command Injection.computrols · computrols building automation software · CWE-77 RCE Komut enjeksiyonu	Yüksek8,8	—	%3,0	23 May 2019
36İzleyin	CVE-2019-10847Kavram kanıtı	Computrols CBAS 18.0.0 allows Cross-Site Request Forgery.computrols · computrols building automation software · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%2,4	24 May 2019
36İzleyin	CVE-2019-10852İstismar yok	Computrols CBAS 18.0.0 allows Authenticated Blind SQL Injection via the id GET parameter, as demonstrated by the index.php?m=servers&a=startcomputrols · computrols building automation software · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%1,8	23 May 2019
33İzleyin	CVE-2019-10849Kavram kanıtı	Computrols CBAS 18.0.0 allows unprotected Subversion (SVN) directory / source code disclosure.computrols · computrols building automation software · CWE-862 Kimlik doğrulamasız Erişim denetimi (IDOR)	Yüksek7,5	—	%9,0	23 May 2019
32İzleyin	CVE-2019-10853İstismar yok	Computrols CBAS 18.0.0 allows Authentication Bypass.computrols · computrols building automation software Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek8,1	—	%1,7	23 May 2019
30İzleyin	CVE-2019-10855İstismar yok	Computrols CBAS 18.0.0 mishandles password hashes.computrols · computrols building automation software · CWE-326 Kimlik doğrulamasız Zayıf kripto	Yüksek7,5	—	%1,0	23 May 2019
26İzleyin	CVE-2019-10851İstismar yok	Computrols CBAS 18.0.0 has hard-coded encryption keys.computrols · computrols building automation software · CWE-798 Gömülü kimlik bilgisi	Orta6,5	—	%0,7	23 May 2019
25İzleyin	CVE-2019-10846Kavram kanıtı	Computrols CBAS 18.0.0 allows Unauthenticated Reflected Cross-Site Scripting vulnerabilities in the login page and password reset page via tcomputrols · computrols building automation system · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%4,7	23 May 2019
24İzleyin	CVE-2019-10848Kavram kanıtı	Computrols CBAS 18.0.0 allows Username Enumeration.computrols · computrols building automation software · CWE-203 Kimlik doğrulamasız	Orta5,3	—	%8,5	24 May 2019

CVE-2019-10850
40Planlayın
Computrols CBAS 18.0.0 has Default Credentials.
KritikCVSS 9,8İstismar yokEPSS %2
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
computrols · computrols building automation software23 May 2019
CVE-2019-10854
36İzleyin
Computrols CBAS 18.0.0 allows Authenticated Command Injection.
YüksekCVSS 8,8İstismar yokEPSS %3
- RCE
- Komut enjeksiyonu
computrols · computrols building automation software23 May 2019
CVE-2019-10847
36İzleyin
Computrols CBAS 18.0.0 allows Cross-Site Request Forgery.
YüksekCVSS 8,8Kavram kanıtıEPSS %2
- Kimlik doğrulamasız
- CSRF
computrols · computrols building automation software24 May 2019
CVE-2019-10852
36İzleyin
Computrols CBAS 18.0.0 allows Authenticated Blind SQL Injection via the id GET parameter, as demonstrated by the index.php?m=servers&a=start
YüksekCVSS 8,8İstismar yokEPSS %2
- SQL enjeksiyonu
computrols · computrols building automation software23 May 2019
CVE-2019-10849
33İzleyin
Computrols CBAS 18.0.0 allows unprotected Subversion (SVN) directory / source code disclosure.
YüksekCVSS 7,5Kavram kanıtıEPSS %9
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
computrols · computrols building automation software23 May 2019
CVE-2019-10853
32İzleyin
Computrols CBAS 18.0.0 allows Authentication Bypass.
YüksekCVSS 8,1İstismar yokEPSS %2
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
computrols · computrols building automation software23 May 2019
CVE-2019-10855
30İzleyin
Computrols CBAS 18.0.0 mishandles password hashes.
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- Zayıf kripto
computrols · computrols building automation software23 May 2019
CVE-2019-10851
26İzleyin
Computrols CBAS 18.0.0 has hard-coded encryption keys.
OrtaCVSS 6,5İstismar yokEPSS %1
- Gömülü kimlik bilgisi
computrols · computrols building automation software23 May 2019
CVE-2019-10846
25İzleyin
Computrols CBAS 18.0.0 allows Unauthenticated Reflected Cross-Site Scripting vulnerabilities in the login page and password reset page via t
OrtaCVSS 6,1Kavram kanıtıEPSS %5
- Kimlik doğrulamasız
- XSS
computrols · computrols building automation system23 May 2019
CVE-2019-10848
24İzleyin
Computrols CBAS 18.0.0 allows Username Enumeration.
OrtaCVSS 5,3Kavram kanıtıEPSS %8
- Kimlik doğrulamasız
computrols · computrols building automation software24 May 2019