Kieback & Peter vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Kieback & Peter products: 2 record(s), with severity, exploitation and fixes.

DDC4002 1 DDC4100 1 DDC4200 1 DDC4200-L 1 DDC4400 1 DDC4002e 1 DDC4200e 1 DDC4400e 1 DDC4020e 1 DDC4040e 1 DDC520 1 Neutrino-GLT 1

Exploited only (KEV) →

CVE-2026-4293 Medium · 5.3 CWE-79 May 20, 2026

Kieback & Peter DDC Building Controllers Cross-site Scripting

The affected Kieback & Peter DDC building controllers are vulnerable to cross-site scripting, enabling JavaScript to be executed by the victim's browser, which allows the attacker to control the browser.

CVE-2025-6225 Medium · 6.9 CWE-78 Jan 7, 2026

Command injection in Kieback&Peter Neutrino-GLT

Kieback&Peter Neutrino-GLT product is used for building management. It's web component "SM70 PHWEB" is vulnerable to shell command injection via login form. The injected commands would execute with low privileges. The vulnerability has been fixed in version 9.40.02