CVE-2021-40366

A vulnerability has been identified in Climatix POL909 AWB module All versions V11.42, Climatix POL909 AWM module All versions V11.34. The web server of affected devices transmits data without TLS encryption. This could allow an unauthenticated remote attacker in a man-in-the-middle position to...

CVE-2020-7575

A vulnerability has been identified in Climatix POL908 BACnet/IP module All versions, Climatix POL909 AWM module All versions V11.32. A persistent cross-site scripting XSS vulnerability exists in the web server access log page of the affected devices that could allow an attacker to inject arbitra...

CVE-2020-7574

A vulnerability has been identified in Climatix POL908 BACnet/IP module All versions, Climatix POL909 AWM module All versions V11.32. A persistent cross-site scripting XSS vulnerability exists in the "Server Config" web interface of the affected devices that could allow an attacker to inject...

CVE-2020-7574

Siemens Climatix POL908 (BACnet/IP module) and POL909 (AWM module) are affected by CVE-2020-7574, a cross-site scripting (XSS) vulnerability in the Server Config web interface. The issue, present in all versions for POL908 and all versions

Deutsche AWM Active: Funds - Corrupted files, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Deutsche AWM Active: Funds published at the 'play' market has multiple vulnerabilities...