Lucene search
+L

17 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2015-4197

Malware in sbrugna...

4.3CVSS6.4AI score0.02544EPSS
SaveExploits1References5
CNVD
CNVD
added 2022/03/09 12:00 a.m.77 views

Siemens Climatix POL909 (AWM and AWB) Information Disclosure Vulnerability

Siemens Climatix AWB Advanced Web and BACnet Module, POL909 enables users of the Climatix 600 solution to connect to a BACnet IP network and implement and load customer web pages and features. Siemens Climatix AWM Advanced Web Module, POL909 enables users of the Climatix 600 solution to implement...

6.5CVSS2.1AI score0.00747EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/03/09 12:00 a.m.44 views

Siemens Climatix POL909 (AWM and AWB) Cross-Site Scripting Vulnerability

Siemens Climatix AWB Advanced Web and BACnet Module, POL909 enables users of the Climatix 600 solution to connect to a BACnet IP network and to implement and load customer web pages and features.Siemens Climatix AWM Advanced Web Module, POL909 enables users of the Climatix 600 solution to impleme...

6.1CVSS5.9AI score0.00562EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/03/09 12:00 a.m.87 views

Siemens Climatix POL909 (AWM and AWB) Cross-Site Scripting Vulnerability (CNVD-2022-17788)

Siemens Climatix AWB Advanced Web and BACnet Module, POL909 enables users of the Climatix 600 solution to connect to a BACnet IP network and implement and load customer web pages and features. Siemens Climatix AWM Advanced Web Module, POL909 enables users of the Climatix 600 solution to implement...

6.1CVSS1.1AI score0.00562EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/03/08 12:00 a.m.12 views

Siemens Climatix Pol909 日志信息泄露漏洞

Siemens Climatix AWB Advanced Web and BACnet Module, POL909 enables users of the Climatix 600 solution to connect to a BACnet IP network and implement and load customer web pages and features. Siemens Climatix AWM Advanced Web Module, POL909 enables users of the Climatix 600 solution to implement...

6.5CVSS5.5AI score0.00747EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/03/08 12:00 a.m.10 views

Climatix POL909跨站脚本漏洞

Siemens Climatix AWB Advanced Web and BACnet Module, POL909 enables users of the Climatix 600 solution to connect to a BACnet IP network and to implement and load customer web pages and features.Siemens Climatix AWM Advanced Web Module, POL909 enables users of the Climatix 600 solution to impleme...

6.1CVSS5.3AI score0.00562EPSS
SaveExploits0References5
ICS
ICS
added 2022/03/08 12:00 a.m.86 views

Siemens Climatix POL909

1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Climatix POL909 AWB and AWM modules Vulnerabilities: Cross-site Scripting, Improper Access Control 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an...

6.5CVSS7AI score0.00747EPSS
SaveExploits0References11
CNVD
CNVD
added 2021/11/11 12:00 a.m.54 views

Siemens Climatix POL909 (AWM) Information Disclosure Vulnerability

Siemens Climatix Pol909 is an intelligent network module from Siemens, Germany. security vulnerability exists in versions prior to Siemens Climatix POL909 AWM module V11.34, which stems from the fact that the web server of the affected device does not use TLS encryption when transmitting data. An...

7.4CVSS2.6AI score0.00408EPSS
SaveExploits0References1
ICS
ICS
added 2021/11/11 12:00 a.m.59 views

Siemens Climatix POL909 (Update A)

1. EXECUTIVE SUMMARY CVSS v3 6.4 ATTENTION: Exploitable remotely Vendor: Siemens --------- Begin Update A Part 1 of 3 --------- Equipment: Climatix POL909 AWM and AWB modules --------- End Update A Part 1 of 3 --------- Vulnerability: Missing Encryption of Sensitive Data 2. RISK EVALUATION...

7.4CVSS7.5AI score0.00408EPSS
SaveExploits0References5
CNVD
CNVD
added 2020/04/15 12:00 a.m.10 views

Siemens Climatix POL908 and POL909 Cross-Site Scripting Vulnerabilities (CNVD-2020-26246)

Siemens Climatix is a standardized and programmable control solution for air conditioning, refrigeration and district heating OEMs from Siemens, Germany, offering a comprehensive HVAC portfolio that can be expanded to meet specific needs.BACnet IP - POL908 is one of the BACnet IP communication...

6.1CVSS6.3AI score0.00645EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/04/15 12:00 a.m.8 views

Siemens Climatix POL908 and POL909 Cross-Site Scripting Vulnerabilities

Siemens Climatix is a standardized and programmable control solution for air conditioning, refrigeration and district heating OEMs from Siemens, Germany, offering a comprehensive HVAC portfolio that can be expanded to meet specific needs.BACnet IP - POL908 is one of the BACnet IP communication...

6.1CVSS6.3AI score0.00645EPSS
SaveExploits0References1
ICS
ICS
added 2020/04/14 12:00 a.m.87 views

Siemens Climatix (Update A)

1. EXECUTIVE SUMMARY CVSS v3 6.1 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: Climatix Vulnerability: Cross-site Scripting, Basic XSS 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-20-105-04 Siemens Climatix...

6.1CVSS7.2AI score0.00645EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2019/05/08 12:00 a.m.23 views

Siemens Climatix BACnet/IP Communication Module < 10.34 XSS

Binary data 720066.prm...

4.3CVSS7.3AI score0.02544EPSS
SaveExploits1References2
seebug.org
seebug.org
added 2016/01/11 12:00 a.m.21 views

Siemens Climatix 弱口令漏洞

No description provided by source...

7.1AI score
SaveExploits0
CNVD
CNVD
added 2015/06/30 12:00 a.m.7 views

Siemens Climatix BACnet/IP Communication Module Cross-Site Scripting Vulnerability

The Siemens Climatix BACnet/IP communication module is a communication module for BACnet networks from Siemens, Germany. A cross-site scripting vulnerability exists in the integrated web server in the Siemens Climatix BACnet/IP communication module using firmware versions prior to 10.34. A remote...

4.3CVSS5.9AI score0.02544EPSS
SaveExploits1References1
NVD
NVD
added 2015/06/28 10:59 a.m.15 views

CVE-2015-4174

Cross-site scripting XSS vulnerability in the integrated web server on the Siemens Climatix BACnet/IP communication module with firmware before 10.34 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

4.3CVSS5.6AI score0.02544EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2015/06/28 10:00 a.m.28 views

CVE-2015-4174

Cross-site scripting XSS vulnerability in the integrated web server on the Siemens Climatix BACnet/IP communication module with firmware before 10.34 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

5.6AI score0.02544EPSS
SaveExploits1References4
Rows per page
Query Builder