Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Brivo ACS100, ACS300 6.2.4.3 Clear all filters
TI-2023-05750 CVE-2023-6260 · GHSA-cq4r-v726-cpj4

Web UI OS Command Injection in Brivo ACS100, ACS300

Priority MEDIUM 43

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Brivo ACS100, ACS300 allows OS Command Injection, Bypassing Physical Security.This issue affects ACS100 (Network…

CVSS 3.1CRITICAL 9.0 Adjacent network Low privileges No interaction EPSS 0.00902 Published 2024-02-19 Fixed in 6.2.4.3 CWE-78
TI-2023-05749 CVE-2023-6259 · GHSA-p56p-x426-8q87

Local Access to Sensitive Data in Brivo ACS100 and ACS300

Priority LOW 33

Insufficiently Protected Credentials, : Improper Access Control vulnerability in Brivo ACS100, ACS300 allows Password Recovery Exploitation, Bypassing Physical Security.This issue affects ACS100, ACS300: from 5.2.4 befor…

CVSS 3.1HIGH 7.1 Physical No auth No interaction EPSS 0.00235 Published 2024-02-19 Fixed in 6.2.4.3 CWE-284