PT-2022-23822 · Carel · Carel Pcoweb Hvac Bacnet Gateway

Gjoko Krstic · Published 2022-08-31 · Updated 2025-10-12 · CVE-2022-37122

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Carel pCOWeb HVAC BACnet Gateway versions 2.1.0, Firmware A2.1.0 through B2.1.0, Application Software 2.15.4A Software v16 13020200

Description The Carel pCOWeb HVAC BACnet Gateway is affected by an unauthenticated arbitrary file disclosure issue. Input provided through the file GET parameter to the logdownload.cgi Bash script is not sufficiently validated before being used to download log files. This allows for the disclosure of arbitrary and sensitive files through directory traversal attacks.

Recommendations Carel pCOWeb HVAC BACnet Gateway version 2.1.0, Firmware A2.1.0 through B2.1.0, and Application Software 2.15.4A Software v16 13020200: Ensure proper validation of the file parameter in the logdownload.cgi script to prevent directory traversal.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2022-37122

Affected Products

Carel Pcoweb Hvac Bacnet Gateway

References · 8

• 🔥 https://zeroscience.mk/en/vulnerabilities/ZSL-2022-5709.php · Exploit
• 🔥 https://packetstormsecurity.com/files/167684 · Exploit
• 🔥 https://zeroscience.mk/codes/carelpco_dir.txt · Exploit
• https://osv.dev/vulnerability/CVE-2022-37122 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-37122 · Security Note
• https://t.me/cibsecurity/49131 · Telegram Post
• https://twitter.com/bughuntar/status/1977203602201706641 · Twitter Post
• https://twitter.com/pdnuclei_bot/status/1975863783978406089 · Twitter Post