CVE Watch5 jul 2026

CVE-2021-37292

An Access Control vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 due to an undocumented backdoor acco

CVSS

7.2

Alto

EPSS

6.7%

p93

KEV

—

Exploit Today

0-100

Publicado: 11 abr 2022 · Última mod.: 5 jul 2026

EPSS · 30d

6.7%EPSS · 30 días6.7%

2026-06-302026-07-16

Descripción técnica

An Access Control vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 due to an undocumented backdoor account. A malicious user can log in using the backdor account with admin highest privileges and obtain system control.

Referencias oficiales

www.zeroscience.mkhttps://www.zeroscience.mk/en/vulnerabilities/
www.kevinlab.comhttp://www.kevinlab.com
www.zeroscience.mkhttps://www.zeroscience.mk/en/vulnerabilities/

CVEs relacionados

Sin CVEs relacionados por CWE o producto.