high8.8Public exploit code
CVE-2019-10847
Computrols CBAS 18.0.0 allows Cross-Site Request Forgery.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- CBAS-Web 19.0.0 - Cross-Site Request Forgery (Add Super Admin)2019-11-12 · webapps · hardware
Impact
Computrols CBAS 18.0.0 allows Cross-Site Request Forgery.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Computrols | Computrols Building Automation Software | through 19.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/155247/Computrols-CBAS-Web-19.0.0-Cross-Site-Request-Forgery.html
- https://applied-risk.com/index.php/download_file/view/196/165
- https://applied-risk.com/labs/advisories
- http://packetstormsecurity.com/files/155247/Computrols-CBAS-Web-19.0.0-Cross-Site-Request-Forgery.html
- https://applied-risk.com/index.php/download_file/view/196/165
- https://applied-risk.com/labs/advisories