Authentication Bypass in Computrols CBAS Software
CVE-2019-10853

8.1HIGH

Key Information:

Vendor

Computrols

Status
Computrols Building Automation Software
Vendor
CVE Published:
23 May 2019

What is CVE-2019-10853?

A vulnerability exists in Computrols CBAS version 18.0.0 that allows an attacker to bypass authentication controls. This situation enables unauthorized users to gain access to sensitive system functions, potentially leading to unauthorized data exposure or system manipulation. Organizations utilizing this software should prioritize vulnerability assessment and remediation to safeguard their systems against possible exploitation.

References

https://applied-risk.com/labs/advisories
x_refsource_MISC
https://applied-risk.com/index.php/download_file/view/196...
x_refsource_MISC

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.