Siemens OZW672 操作系统命令注入漏洞

The OZW device web server is used for remote monitoring of building controller devices, e.g. for monitoring heating control or air conditioning status. A code execution and SQL injection vulnerability exists in the Siemens OZW672 and OZW772 web servers, which can be exploited by an attacker to...

Honeywell Alerton Ascent Control Module 安全漏洞

The Honeywell Alerton Ascent Control Module is a high performance, BACnet-compliant, integrated building controller and router from USAHoneywell. It can support BACnet/Ethernet, BACnet/IP and BACnet/MSTP. A security vulnerability exists in Honeywell Alerton Ascent Control Module ACM versions...

Siemens OZW672 and OZW772 Cross-Site Scripting Vulnerabilities

Siemens OZW672 and OZW772 are both building controller products from Siemens, Germany. A cross-site scripting vulnerability exists in the Siemens OZW672 and OZW772 devices. A remote attacker could exploit the vulnerability to alter data and settings...