PatchTheCVEremote kiln control vulnerabilities and fixes
Recent CVEs affecting remote kiln control, with upgrade or downgrade steps. 9 tracked.
Also searched as: remotekilncontrol.
remote kiln control has 9 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 9. Most recent: 2020-05-07. Highest priority: CVE-2019-18868 (score 64/100).
- CVE-2019-18872 HIGH 7.5 UPGRADE Weak password requirements in Blaauw Remote Kiln Control through v3.00r4 allow a user to set short or guessabl
- CVE-2019-18871 HIGH 8.8 UPGRADE A path traversal in debug.php accessed via default.php in Blaauw Remote Kiln Control through v3.00r4 allows an
- CVE-2019-18870 MEDIUM 6.5 UPGRADE A path traversal via the iniFile parameter in excel.php in Blaauw Remote Kiln Control through v3.00r4 allows a
- CVE-2019-18869 CRITICAL 9.8 UPGRADE Leftover Debug Code in Blaauw Remote Kiln Control through v3.00r4 allows a user to execute arbitrary php code
- CVE-2019-18868 CRITICAL 9.8 UPGRADE Blaauw Remote Kiln Control through v3.00r4 allows an unauthenticated attacker to access MySQL credentials in c
- CVE-2019-18867 HIGH 7.5 UPGRADE Browsable directories in Blaauw Remote Kiln Control through v3.00r4 allow an attacker to enumerate sensitive f
- CVE-2019-18866 HIGH 7.5 UPGRADE Unauthenticated SQL injection via the username in the login mechanism in Blaauw Remote Kiln Control through v3
- CVE-2019-18865 MEDIUM 5.3 UPGRADE Information disclosure via error message discrepancies in authentication functions in Blaauw Remote Kiln Contr
- CVE-2019-18864 HIGH 7.5 UPGRADE /server-info and /server-status in Blaauw Remote Kiln Control through v3.00r4 allow an unauthenticated attacke
FAQ
How do I fix remote kiln control vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is remote kiln control being exploited right now?
None of the tracked remote kiln control CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which remote kiln control CVE should I patch first?
CVE-2019-18868 currently ranks highest (64/100): Blaauw Remote Kiln Control through v3.00r4 allows an unauthenticated attacker to access MySQL credentials in c.