Carel Pcoweb Card Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Carel Pcoweb Card Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2019-11369 — CVSS 8.8 (high): An issue was discovered in Carel pCOWeb prior to B1.2.4. In /config/pw_changeusers.html the device stores cleartext passwords, which may…
• CVE-2019-9484 — CVSS 7.5 (high): The Glen Dimplex Deutschland GmbH implementation of the Carel pCOWeb configuration tool allows remote attackers to obtain access via an…
• CVE-2022-37122 — CVSS 7.5 (high): Carel pCOWeb HVAC BACnet Gateway 2.1.0, Firmware: A2.1.0 - B2.1.0, Application Software: 2.15.4A Software v16 13020200 suffers from an…
• CVE-2019-11370 — CVSS 5.4 (medium): Stored XSS was discovered in Carel pCOWeb prior to B1.2.4, as demonstrated by the config/pw_snmp.html "System contact" field.