computrols building automation software vulnerabilities and fixes

Recent CVEs affecting computrols building automation software, with upgrade or downgrade steps. 9 tracked.

Also searched as: computrolsbuildingautomationsoftware.

computrols building automation software has 9 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 9. Most recent: 2019-05-24. Highest priority: CVE-2019-10849 (score 60/100).

• CVE-2019-10855 HIGH 7.5 UPGRADE Computrols CBAS 18.0.0 mishandles password hashes
• CVE-2019-10854 HIGH 8.8 UPGRADE Computrols CBAS 18.0.0 allows Authenticated Command Injection.
• CVE-2019-10853 HIGH 8.1 UPGRADE Computrols CBAS 18.0.0 allows Authentication Bypass.
• CVE-2019-10852 HIGH 8.8 UPGRADE Computrols CBAS 18.0.0 allows Authenticated Blind SQL Injection via the id GET parameter, as demonstrated by t
• CVE-2019-10851 MEDIUM 6.5 UPGRADE Computrols CBAS 18.0.0 has hard-coded encryption keys.
• CVE-2019-10850 CRITICAL 9.8 UPGRADE Computrols CBAS 18.0.0 has Default Credentials.
• CVE-2019-10849 HIGH 7.5 UPGRADE Computrols CBAS 18.0.0 allows unprotected Subversion (SVN) directory / source code disclosure.
• CVE-2019-10848 MEDIUM 5.3 UPGRADE Computrols CBAS 18.0.0 allows Username Enumeration.
• CVE-2019-10847 HIGH 8.8 UPGRADE Computrols CBAS 18.0.0 allows Cross-Site Request Forgery.

FAQ

How do I fix computrols building automation software vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is computrols building automation software being exploited right now?

None of the tracked computrols building automation software CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which computrols building automation software CVE should I patch first?

CVE-2019-10849 currently ranks highest (60/100): Computrols CBAS 18.0.0 allows unprotected Subversion (SVN) directory / source code disclosure..

RSS feed for computrols building automation software · ← Back to latest CVEs