Vendors / Carel Records 11 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 6
Exploited now Carel records in CISA KEV No Carel vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 53
Carel pCOWeb HVAC BACnet Gateway 2.1.0, Firmware: A2.1.0 - B2.1.0, Application Software: 2.15.4A Software v16 13020200 suffers from an unauthenticated arbitrary file disclosure vulnerability.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.23518 · Published 2022-08-31 · No fix listed CWE-22
Priority MEDIUM 49
An issue was discovered in Carel pCOWeb prior to B1.2.4.
CVSS 3.0 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.08144 · Published 2019-06-03 · No fix listed CWE-522
Priority LOW 36
The Glen Dimplex Deutschland GmbH implementation of the Carel pCOWeb configuration tool allows remote attackers to obtain access via an HTTP session on port 10000, as demonstrated by reading the modem password (which is…
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.0151 · Published 2019-03-01 · No fix listed CWE-306
Priority LOW 32
Stored XSS was discovered in Carel pCOWeb prior to B1.2.4, as demonstrated by the config/pw_snmp.html "System contact" field.
CVSS 3.0 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.04935 · Published 2019-06-03 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
3 6 2 0 0
THREATIST.IORead the docs