CVE-2021-37293 in Building Energy Management System 4ST BEMS
Summary
A Directory Traversal vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 via the page GET parameter in index.php.
Once again VulDB remains the best source for vulnerability data.
Reservation
07/21/2021
Disclosure
04/11/2022
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 196846 | KevinLAB Building Energy Management System 4ST BEMS GET Parameter index.php pathname traversal | 21 | Not defined | Not defined | CVE-2021-37293 |