CVE-2021-37293

MEDIUM

KevinLAB 4ST_L-BEMS 1.0.0 - Path Traversal via Page GET Parameter

Title source: llm
STIX 2.1

Description

A Directory Traversal vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 via the page GET parameter in index.php.

References (2)

Core 2
Core References
Exploit, Third Party Advisory x_refsource_misc
https://www.zeroscience.mk/en/vulnerabilities/
Vendor Advisory x_refsource_misc
http://www.kevinlab.com

Scores

CVSS v3 6.5
EPSS 0.0141
EPSS Percentile 69.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-22
Status published
Products (1)
kevinlab/4st_l-bems 1.0.0
Published Apr 11, 2022
Tracked Since Feb 18, 2026