Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2022-04-11	CVE-2021-37291	SQL Injection vulnerability in Kevinlab 4ST L-Bems 1.0.0 An SQL Injection vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 ivia the input_id POST parameter in index.php. network low complexity kevinlab CWE-89 critical	9.8

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.