KevinLAB Building Energy Management System is a building energy management system from KevinLAB Korea.An access control error vulnerability exists in KevinLAB Building Energy Management System version 1.0.0, which stems from a network system or The product does not properly restrict access to resources from unauthorized roles. An attacker could exploit this vulnerability to log in and gain control of the system using a backend account with the highest administrator privileges.