Read the docs

Brivo

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Brivo records in CISA KEV

No Brivo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Acs100 Firmware 2 records MEDIUM Acs300 Firmware 2 records MEDIUM

Records

2 records in Acs300 Firmware · all components

TI-2023-05750 CVE-2023-6260 · GHSA-cq4r-v726-cpj4

Web UI OS Command Injection in Brivo ACS100, ACS300

Priority MEDIUM 43

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Brivo ACS100, ACS300 allows OS Command Injection, Bypassing Physical Security.This issue affects ACS100 (Network…

CVSS 3.1CRITICAL 9.0 Adjacent network Low privileges No interaction EPSS 0.00902 Published 2024-02-19 Fixed in 6.2.4.3 CWE-78
TI-2023-05749 CVE-2023-6259 · GHSA-p56p-x426-8q87

Local Access to Sensitive Data in Brivo ACS100 and ACS300

Priority LOW 33

Insufficiently Protected Credentials, : Improper Access Control vulnerability in Brivo ACS100, ACS300 allows Password Recovery Exploitation, Bypassing Physical Security.This issue affects ACS100, ACS300: from 5.2.4 befor…

CVSS 3.1HIGH 7.1 Physical No auth No interaction EPSS 0.00235 Published 2024-02-19 Fixed in 6.2.4.3 CWE-284
Open these records in search →