Kevinlab

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Kevinlab records in CISA KEV

No Kevinlab vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in 4st L-bems · all components

TI-2021-15296 CVE-2021-37291 · GHSA-8h2j-x64q-v264

MEDIUM 51

An SQL Injection vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 ivia the input_id POST parameter in index.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06535 Published 2022-04-11 No fix listed CWE-89

TI-2021-15297 CVE-2021-37292 · GHSA-xhgx-qjr6-8ff6

MEDIUM 41

An Access Control vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 due to an undocumented backdoor account.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0655 Published 2022-04-11 No fix listed

TI-2021-15298 CVE-2021-37293 · GHSA-x263-68hq-f692

LOW 32

A Directory Traversal vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 via the page GET parameter in index.php.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01449 Published 2022-04-11 No fix listed CWE-22