VYPR

pCOWeb HVAC BACnet Gateway

by Carel

CVEs (1)

  • CVE-2022-37122Aug 31, 2022
    risk 0.06cvss epss 0.18

    Carel pCOWeb HVAC BACnet Gateway 2.1.0, Firmware: A2.1.0 - B2.1.0, Application Software: 2.15.4A Software v16 13020200 suffers from an unauthenticated arbitrary file disclosure vulnerability. Input passed through the 'file' GET parameter through the 'logdownload.cgi' Bash script…