Control room management suite

This hub aggregates every CVE we track for Control room management suite, a product in the ics ot iot space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 9 most recently published vulnerabilities affecting Control room management suite.

• CVE-2022-26978Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /checklogin.jsp endpoint. The os_username parameters is not correctly sanitized, lea...6.1Jun 1, 2022
• CVE-2022-26977Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. Lack of input sanitization of the upload mechanism is lea...6.1Jun 1, 2022
• CVE-2022-26976Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. Lack of input sanitization in the upload mechanism is lea...5.4Jun 1, 2022
• CVE-2022-26975Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing log files without authentication.7.5Jun 1, 2022
• CVE-2022-26974Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a file upload mechanism. Lack of input sanitization in the upload mechanism leads to refle...6.1Jun 1, 2022
• CVE-2022-26973Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. By tweaking the license file name, the returned error mes...5.3Jun 1, 2022
• CVE-2022-26972Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /cgi-bin endpoint. The URL parameters are not correctly sanitized, leading to reflec...6.1Jun 1, 2022
• CVE-2022-26971Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. This upload can be executed without authentication.5.3Jun 1, 2022
• CVE-2022-26233Barco Control Room Management through Suite 2.9 Build 0275 was discovered to be vulnerable to directory traversal, allowing attackers to access sensitive information and components. Requests must b...7.5Apr 3, 2022