Vulnerabilities (CVE)

Filtered by vendor Brivo Subscribe
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-6259 1 Brivo 4 Acs100, Acs100 Firmware, Acs300 and 1 more 2025-04-01 N/A 7.1 HIGH
Insufficiently Protected Credentials, : Improper Access Control vulnerability in Brivo ACS100, ACS300 allows Password Recovery Exploitation, Bypassing Physical Security.This issue affects ACS100, ACS300: from 5.2.4 before 6.2.4.3.
CVE-2023-6260 1 Brivo 4 Acs100, Acs100 Firmware, Acs300 and 1 more 2025-02-05 N/A 9.0 CRITICAL
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Brivo ACS100, ACS300 allows OS Command Injection, Bypassing Physical Security.This issue affects ACS100 (Network Adjacent Access), ACS300 (Physical Access): from 5.2.4 before 6.2.4.3.