Computrols CBAS-Web 19.0.0 - (username) Reflected Cross-Site Scripting Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Computrols CBAS-Web 19.0.0 - 'username' Reflected Cross-Site Scripting Exploit Author: LiquidWorm Vendor Homepage: https://www.computrols.com/capabilities-cbas-web/ Software Link:...

FlexAir Access Control 2.4.9api3 - Remote Code Execution Exploit

Exploit for hardware platform in category web applications Exploit Title: FlexAir Access Control 2.4.9api3 - Remote Code Execution Exploit Author: LiquidWorm Vendor Homepage: https://www.computrols.com/capabilities-cbas-web/ Software Link: https://www.computrols.com/building-automation-software/...

Access Control Error Vulnerability in Multiple Schneider Electric Products (CNVD-2019-34799)

Schneider Electric MEG6501-0001-U.motion KNX server and others are a web-based visualization system from Schneider Electric France. The system is mainly used for KNX-based home and building automation. An access control error vulnerability exists in several Schneider Electric products. An attacke...

Multiple Schneider Electric Products Formatting String Error Vulnerability

Schneider Electric MEG6501-0001-U.motion KNX server and others are a web-based visualization system from Schneider Electric France. The system is mainly used for KNX-based home and building automation. A formatting string error vulnerability exists in several Schneider Electric products. An...

Multiple Schneider Electric Products Server-Side Request Forgery Vulnerabilities

Schneider Electric MEG6501-0001-U.motion KNX server and others are a web-based visualization system from Schneider Electric France. The system is mainly used for KNX-based home and building automation. A server-side request forgery vulnerability exists in several Schneider Electric products. An...

Johnson Controls Metasys system Trust Management Issues Vulnerability

Johnson Controls Metasys system is the United States Johnson Controls Johnson Controls company's set of building automation system. A trust management issue vulnerability exists in the Johnson Controls Metasys system prior to version 9.0, which arises from the Metasys ADS/ADX server and NAE/NIE/N...

Computrols CBAS Web Cross-Site Request Forgery Vulnerability (CNVD-2019-15903)

Computrols CBAS is a building automation system from Computrols USA. A cross-site request forgery vulnerability in Computrols CBAS version 18.0.0 can be exploited by an attacker to send an unintended request to a server via an affected client...

Computrols CBAS Web Information Disclosure Vulnerability

Computrols CBAS is a building automation system from Computrols USA. An information disclosure vulnerability exists in Computrols CBAS Web, which can be exploited by an attacker to download the entire firmware code base and obtain sensitive information...

Computrols CBAS Web Cross-Site Scripting Vulnerability

Computrols CBAS is a building automation system from Computrols USA. A cross-site scripting vulnerability exists in Computrols CBAS Web. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerability to execute...

Computrols CBAS Web Command Injection Vulnerability

CBAS Web is a Web-based building management system BMS from Computrols. Computrols CBAS Web suffers from a command injection vulnerability. An attacker could exploit this vulnerability to execute commands directly on the operating system...

Computrols CBAS Trust Management Issue Vulnerability

Computrols CBAS is a building automation system from Computrols USA. A trust management issue vulnerability exists in Computrols CBAS version 18.0.0 that stems from the program using default credentials and can be exploited by an attacker to scan an entire IPv4 network...

Malware can fully compromise building control systems

By Waqas Enterprise security vendor ForeScout’s operational technology research unit has developed a PoC Proof-of-Concept malware that exposed the vulnerabilities in building automation systems BAS by compromising them due to the presence of two very critical bugs in the BAS's PLC programmable...

RLE Wi-MGR/FDS-Wi Web Server Cross-Site Scripting Vulnerability

RLE Wi-MGR/FDS-Wi is a wireless monitoring device. web server is a web server used in it. A cross-site scripting vulnerability exists in the web server of the RLE Wi-MGR/FDS-Wi version 6.2. A remote attacker can exploit this vulnerability to inject malicious JavaScript code via the device's BACne...

BA SYSTEMS BAS Web Information Disclosure Vulnerability in BAS920 and ISC2000 Devices

BAS920 and ISC2000 devices are both programmable intelligent controller products from BA SYSTEMS of Denmark.BA SYSTEMS BAS Web is a building automation system that runs on them. An access control error vulnerability exists in BA SYSTEMS BAS Web on BAS920 and ISC2000 devices using firmware version...

Building Automation Systems BAS-Device Web Detection

Detection of running version of Building Automation System device. This script sends an HTTP GET request and tries to ensure the presence of Building Automation System devices. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Siemens BACnet Field Panels Security Bypass Vulnerability

BACnet Building Automation Control Network is a data communication protocol for building automation and control networks. A security bypass vulnerability exists in Siemens BACnet Field Panels, where an attacker with network access to an integrated web server ports 80/TCP and 443 /TCP could bypass...

Siemens BACnet Field Panels Directory Traversal Vulnerability

BACnet Building Automation Control Network is a data communication protocol for building automation and control networks. A directory traversal vulnerability exists in Siemens BACnet Field Panels. This allows a remote attacker with network access to an integrated web server ports 80/TCP and 443/T...

Automated Logic WebCTRL 6.1 Path Traversal Arbitrary File Write Vulnerability

Automated Logic WebCTRL version 6.1 suffers from path traversal and arbitrary file write vulnerabilities. Automated Logic WebCTRL 6.1 Path Traversal Arbitrary File Write Vendor: Automated Logic Corporation Product web page: http://www.automatedlogic.com Affected version: ALC WebCTRL, SiteScan Web...

Automated Logic WebCTRL 6.5 - Unrestricted File Upload Remote Code Execution

Automated Logic WebCTRL 6.5 - Unrestricted File Upload Remote Code Execution !/usr/bin/env python -- coding: utf8 -- Automated Logic WebCTRL 6.5 Unrestricted File Upload Remote Code Execution Vendor: Automated Logic Corporation Product web page: http://www.automatedlogic.com Affected version: ALC...

Automated Logic WebCTRL 6.5 - Local Privilege Escalation

Automated Logic WebCTRL 6.5 Insecure File Permissions Privilege Escalation Vendor: Automated Logic Corporation Product web page: http://www.automatedlogic.com Affected version: ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior ALC WebCTRL, SiteScan Web 6.1 and prior ALC WebCTRL, i-Vu 6.0 and prior AL...