Vendor/product archive

carel / pcoweb_card_firmware CVEs

Beta · best-effort

4 CVEs tagged to carel / pcoweb_card_firmware — 0 Critical, 3 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to carel vendor archive

CVE-2022-37122

Published Aug 31, 2022

Carel pCOWeb HVAC BACnet Gateway 2.1.0, Firmware: A2.1.0 - B2.1.0, Application Software: 2.15.4A Software v16 13020200 suffers from an unauthenticated arbitrary file disclosure vu…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2019-11370

Published Jun 3, 2019

Stored XSS was discovered in Carel pCOWeb prior to B1.2.4, as demonstrated by the config/pw_snmp.html "System contact" field.

CVSS 5.4 · Medium

Vendor/product tagsBeta · best-effort

CVE-2019-11369

Published Jun 3, 2019

An issue was discovered in Carel pCOWeb prior to B1.2.4. In /config/pw_changeusers.html the device stores cleartext passwords, which may allow sensitive information to be read by…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2019-9484

Published Mar 1, 2019

The Glen Dimplex Deutschland GmbH implementation of the Carel pCOWeb configuration tool allows remote attackers to obtain access via an HTTP session on port 10000, as demonstrated…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1