Read the docs

Contec-touch

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Contec-touch records in CISA KEV

No Contec-touch vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Smart Home Firmware 1 record MEDIUM

Records

1 record

TI-2018-06660 CVE-2018-9162 · GHSA-rj6p-2fcm-m72j

Contec Smart Home 4.15 devices do not require authentication for new_user.php…

Priority MEDIUM 46

Contec Smart Home 4.15 devices do not require authentication for new_user.php, edit_user.php, delete_user.php, and user.php, as demonstrated by changing the admin password and then obtaining control over doors.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02235 Published 2018-03-31 No fix listed CWE-306
Open these records in search →