VYPR

Climatix Pol908 Firmware

by Siemens Foundation

CVEs (2)

  • CVE-2020-7575MedApr 14, 2020
    risk 0.40cvss 6.1epss 0.01

    A vulnerability has been identified in Climatix POL908 (BACnet/IP module) (All versions), Climatix POL909 (AWM module) (All versions < V11.32). A persistent cross-site scripting (XSS) vulnerability exists in the web server access log page of the affected devices that could allow…

  • CVE-2020-7574MedApr 14, 2020
    risk 0.40cvss 6.1epss 0.01

    A vulnerability has been identified in Climatix POL908 (BACnet/IP module) (All versions), Climatix POL909 (AWM module) (All versions < V11.32). A persistent cross-site scripting (XSS) vulnerability exists in the "Server Config" web interface of the affected devices that could…