Vulnerabilidades de Kieback & Peter
CVEs publicadas que afetam produtos de Kieback & Peter: 2 registro(s), com severidade, exploração e correções.
DDC4002 1DDC4100 1DDC4200 1DDC4200-L 1DDC4400 1DDC4002e 1DDC4200e 1DDC4400e 1DDC4020e 1DDC4040e 1DDC520 1Neutrino-GLT 1
CVE-2026-4293
Média · 5.3
CWE-79 20/05/2026
Kieback & Peter DDC Building Controllers Cross-site Scripting
The affected Kieback & Peter DDC building controllers are vulnerable to cross-site scripting, enabling JavaScript to be executed by the victim's browser, which allows the attacker to control the browser.
CVE-2025-6225
Média · 6.9
CWE-78 07/01/2026
Command injection in Kieback&Peter Neutrino-GLT
Kieback&Peter Neutrino-GLT product is used for building management. It's web component "SM70 PHWEB" is vulnerable to shell command injection via login form. The injected commands would execute with low privileges. The vulnerability has been fixed in version 9.40.02