Kevinlab 4st L-Bems
3 CVEs affecting Kevinlab 4st L-Bems. Latest disclosed: 2022-04-11. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-37291 | Critical | 9.8 | 2022-04-11 | An SQL Injection vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 ivia the input_id POST parameter in index.php. |
CVE-2021-37292 | High | 7.2 | 2022-04-11 | An Access Control vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 due to an undocumented backdoor account. A malicious us… |
CVE-2021-37293 | Medium | 6.5 | 2022-04-11 | A Directory Traversal vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 via the page GET parameter in index.php. |