PatchTheCVEcomputrols vulnerabilities
Recent CVEs affecting computrols products. 10 tracked.
computrols has 10 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 10. Most recent: 2019-05-24. Highest priority: CVE-2019-10849 (score 60/100).
- CVE-2019-10855 HIGH 7.5 UPGRADE Computrols CBAS 18.0.0 mishandles password hashes
- CVE-2019-10854 HIGH 8.8 UPGRADE Computrols CBAS 18.0.0 allows Authenticated Command Injection.
- CVE-2019-10853 HIGH 8.1 UPGRADE Computrols CBAS 18.0.0 allows Authentication Bypass.
- CVE-2019-10852 HIGH 8.8 UPGRADE Computrols CBAS 18.0.0 allows Authenticated Blind SQL Injection via the id GET parameter, as demonstrated by t
- CVE-2019-10851 MEDIUM 6.5 UPGRADE Computrols CBAS 18.0.0 has hard-coded encryption keys.
- CVE-2019-10850 CRITICAL 9.8 UPGRADE Computrols CBAS 18.0.0 has Default Credentials.
- CVE-2019-10849 HIGH 7.5 UPGRADE Computrols CBAS 18.0.0 allows unprotected Subversion (SVN) directory / source code disclosure.
- CVE-2019-10848 MEDIUM 5.3 UPGRADE Computrols CBAS 18.0.0 allows Username Enumeration.
- CVE-2019-10847 HIGH 8.8 UPGRADE Computrols CBAS 18.0.0 allows Cross-Site Request Forgery.
- CVE-2019-10846 MEDIUM 6.1 UPGRADE Computrols CBAS 18.0.0 allows Unauthenticated Reflected Cross-Site Scripting vulnerabilities in the login page
FAQ
How do I fix computrols vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is computrols being exploited right now?
None of the tracked computrols CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which computrols CVE should I patch first?
CVE-2019-10849 currently ranks highest (60/100): Computrols CBAS 18.0.0 allows unprotected Subversion (SVN) directory / source code disclosure..