Vulnerabilities

TI-2021-15297 CVE-2021-37292 · GHSA-xhgx-qjr6-8ff6

An Access Control vulnerability exists in KevinLAB Inc Building Energy Management System…

MEDIUM 41

An Access Control vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 due to an undocumented backdoor account.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0655 Published 2022-04-11 No fix listed

TI-2021-15298 CVE-2021-37293 · GHSA-x263-68hq-f692

LOW 32

A Directory Traversal vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 via the page GET parameter in index.php.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01449 Published 2022-04-11 No fix listed CWE-22

TI-2021-15296 CVE-2021-37291 · GHSA-8h2j-x64q-v264

MEDIUM 51

An SQL Injection vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 ivia the input_id POST parameter in index.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06535 Published 2022-04-11 No fix listed CWE-89