medium5.3Public exploit code
CVE-2019-10848
Computrols CBAS 18.0.0 allows Username Enumeration.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- CBAS-Web 19.0.0 - Username Enumeration2019-11-12 · webapps · hardware
Impact
Computrols CBAS 18.0.0 allows Username Enumeration.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Computrols | Computrols Building Automation Software | through 19.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/155266/Computrols-CBAS-Web-19.0.0-Username-Enumeration.html
- https://applied-risk.com/index.php/download_file/view/196/165
- https://applied-risk.com/labs/advisories
- http://packetstormsecurity.com/files/155266/Computrols-CBAS-Web-19.0.0-Username-Enumeration.html
- https://applied-risk.com/index.php/download_file/view/196/165
- https://applied-risk.com/labs/advisories