Approved changes feed: RSS · Atom

cpe:2.3:a:computrols:computrols_building_automation_software:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorComputrols (1b9cc55d-5033-52e6-bace-f52bb504b485)
ProductComputrols Building Automation Software (afe283a2-b3ed-5bfb-aee9-0a7db6edf7fa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-10855 vulnerable 2026-06-08 05:12:25.348791 Details available
Computrols CBAS 18.0.0 mishandles password hashes. The approach is MD5 with a pw prefix, e.g., if the password is admin, it will calculate the MD5 hash of pwadmin and store it in a MySQL database.
Published: 2019-05-23T18:43:28.000Z
Updated: 2024-08-04T22:32:02.105Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10854 vulnerable 2026-06-08 05:12:25.348504 Details available
Computrols CBAS 18.0.0 allows Authenticated Command Injection.
Published: 2019-05-23T18:45:13.000Z
Updated: 2024-08-04T22:32:02.106Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10853 vulnerable 2026-06-08 05:12:25.348233 Details available
Computrols CBAS 18.0.0 allows Authentication Bypass.
Published: 2019-05-23T18:53:14.000Z
Updated: 2024-08-04T22:32:02.084Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10852 vulnerable 2026-06-08 05:12:25.347954 Details available
Computrols CBAS 18.0.0 allows Authenticated Blind SQL Injection via the id GET parameter, as demonstrated by the index.php?m=servers&a=start_pulling&id= substring.
Published: 2019-05-23T18:56:52.000Z
Updated: 2024-08-04T22:32:02.116Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10851 vulnerable 2026-06-08 05:12:25.347658 Details available
Computrols CBAS 18.0.0 has hard-coded encryption keys.
Published: 2019-05-23T18:58:23.000Z
Updated: 2024-08-04T22:32:02.184Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10850 vulnerable 2026-06-08 05:12:25.347258 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10849 vulnerable 2026-06-08 05:12:25.346954 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10848 vulnerable 2026-06-08 05:12:25.346612 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10847 vulnerable 2026-06-08 05:12:25.346090 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.