Carel vulnerabilities
We track 2 vulnerabilities in Carel products across 4 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 12, 2023.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest Carel vulnerabilities
- 9.8 Critical severity
Boss Mini: External Control of File Name or Path
A vulnerability was found in Boss Mini 1.4.0 Build 6221. It has been classified as critical. This affects an unknown part of the file boss/servlet/document. The manipulation of the argument path leads to file inclusion. It is possible to initiate the attack re
- 7.5 High severity
Pcoweb Card Firmware: Improper Limitation of a Pathname to a Restricted Directory
Carel pCOWeb HVAC BACnet Gateway 2.1.0, Firmware: A2.1.0 - B2.1.0, Application Software: 2.15.4A Software v16 13020200 suffers from an unauthenticated arbitrary file disclosure vulnerability. Input passed through the 'file' GET parameter through the 'logdownlo