This page aggregates publicly disclosed CVE and security risk information related to brivo, with CVSS, EPSS, publication dates, and vulnerability intelligence data to help assess potential risk and remediation priority.
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2023-6260 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Brivo ACS100, ACS300 allows OS Command Injection, Bypassing Physical Security.This issue affects ACS100 (Network Adjacent Access), ACS300 (Physical Access): from 5.2.4 before 6.2.4.3. | 57dba5dd-1a03-47f6-8b36-e84e47d335d8 | 9.0 | 0.90% | 2024-02-19 | 2026-06-17 |
| CVE-2023-6259 | Insufficiently Protected Credentials, : Improper Access Control vulnerability in Brivo ACS100, ACS300 allows Password Recovery Exploitation, Bypassing Physical Security.This issue affects ACS100, ACS300: from 5.2.4 before 6.2.4.3. | 57dba5dd-1a03-47f6-8b36-e84e47d335d8 | 7.1 | 0.24% | 2024-02-19 | 2026-06-17 |