Computrols

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

Computrols records in CISA KEV

No Computrols vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Computrols Building Automation Software 9 records MEDIUM Computrols Building Automation System 1 record LOW

Records

9 records in Computrols Building Automation Software · all components

TI-2019-08081 CVE-2019-10850 · GHSA-7m72-36wh-c4fr

Computrols CBAS 18.0.0 has Default Credentials.

MEDIUM 46

Computrols CBAS 18.0.0 has Default Credentials.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01949 Published 2019-05-23 No fix listed CWE-798

TI-2019-08085 CVE-2019-10854 · GHSA-63vq-6399-h95w

Computrols CBAS 18.0.0 allows Authenticated Command Injection.

MEDIUM 44

Computrols CBAS 18.0.0 allows Authenticated Command Injection.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02991 Published 2019-05-23 No fix listed CWE-77

TI-2019-08080 CVE-2019-10849 · GHSA-gx56-w6x8-7fjx

Computrols CBAS 18.0.0 allows unprotected Subversion (SVN) directory / source code disclosure.

MEDIUM 44

Computrols CBAS 18.0.0 allows unprotected Subversion (SVN) directory / source code disclosure.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.09012 Published 2019-05-23 No fix listed CWE-862

TI-2019-08078 CVE-2019-10847 · GHSA-q3gx-7gwv-xv6q

Computrols CBAS 18.0.0 allows Cross-Site Request Forgery.

MEDIUM 43

Computrols CBAS 18.0.0 allows Cross-Site Request Forgery.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0242 Published 2019-05-24 No fix listed CWE-352

TI-2019-08083 CVE-2019-10852 · GHSA-9xvr-vmq9-hmhp

Computrols CBAS 18.0.0 allows Authenticated Blind SQL Injection via the id GET parameter…

MEDIUM 42

Computrols CBAS 18.0.0 allows Authenticated Blind SQL Injection via the id GET parameter, as demonstrated by the index.php?m=servers&a=start_pulling&id= substring.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01752 Published 2019-05-23 No fix listed CWE-89

TI-2019-08084 CVE-2019-10853 · GHSA-8w9p-f5fm-r48v

Computrols CBAS 18.0.0 allows Authentication Bypass.

LOW 39

Computrols CBAS 18.0.0 allows Authentication Bypass.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.0166 Published 2019-05-23 No fix listed

TI-2019-08086 CVE-2019-10855 · GHSA-9wr8-p2g4-v8fw

Computrols CBAS 18.0.0 mishandles password hashes.

LOW 35

Computrols CBAS 18.0.0 mishandles password hashes.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00998 Published 2019-05-23 No fix listed CWE-326

TI-2019-08079 CVE-2019-10848 · GHSA-484m-c8g4-232f

Computrols CBAS 18.0.0 allows Username Enumeration.

LOW 35

Computrols CBAS 18.0.0 allows Username Enumeration.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.08489 Published 2019-05-24 No fix listed CWE-203

TI-2019-08082 CVE-2019-10851 · GHSA-c5h2-6jqx-ph3c

Computrols CBAS 18.0.0 has hard-coded encryption keys.

LOW 30

Computrols CBAS 18.0.0 has hard-coded encryption keys.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00654 Published 2019-05-23 No fix listed CWE-798

Open these records in search →

Critical	1
High	6
Medium	3
Low	0
No CVSS	0