Approved changes feed: RSS · Atom

cpe:2.3:o:brivo:acs100_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorBrivo (8a545cec-ce89-586a-8f8d-2e138cede857)
ProductAcs100 Firmware (6314b1dc-0ca9-5cb2-9689-40cf8aef395a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-6260 vulnerable 2026-06-08 06:19:46.798321 Web UI OS Command Injection in Brivo ACS100, ACS300
HIGH (7.4)
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Brivo ACS100, ACS300 allows OS Command Injection, Bypassing Physical Security.This issue affects ACS100 (Network Adjacent Access), ACS300 (Physical Access): from 5.2.4 before 6.2.4.3.
Published: 2024-02-19T21:30:20.947Z
Updated: 2024-08-02T08:28:20.371Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6259 vulnerable 2026-06-08 06:19:46.794422 Local Access to Sensitive Data in Brivo ACS100 and ACS300
HIGH (7.1)
Insufficiently Protected Credentials, : Improper Access Control vulnerability in Brivo ACS100, ACS300 allows Password Recovery Exploitation, Bypassing Physical Security.This issue affects ACS100, ACS300: from 5.2.4 before 6.2.4.3.
Published: 2024-02-19T21:28:01.273Z
Updated: 2024-08-22T13:49:14.128Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.