CVE-2021-37292

PoC —

CVSS 3.1

7.2 high

EPSS

7%p93

Published

Apr 11, 2022 (Apr 11, 2022)

Modified

Jul 5, 2026

Description

An Access Control vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 due to an undocumented backdoor account. A malicious user can log in using the backdor account with admin highest privileges and obtain system control.

Vendors: kevinlab
Products: 4st l-bems
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (6.6%)

In the news0 stories

No ingested article mentions this CVE yet.