Vulnerabilities (CVE)

Filtered by vendor Carel Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-34827 1 Carel 2 Boss Mini, Boss Mini Firmware 2023-08-08 N/A 9.9 CRITICAL
Carel Boss Mini 1.5.0 has Improper Access Control.
CVE-2019-13553 2 Carel, Rittal 2 Pcoweb Firmware, Chiller Sk 3232 2020-02-10 10.0 HIGH 9.8 CRITICAL
Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4. The authentication mechanism on affected systems is configured using hard-coded credentials. These credentials could allow attackers to influence the primary operations of the affected systems, namely turning the cooling unit on and off and setting the temperature set point.