Skip to content
OpenAdvisories
Medium ICSA-26-139-05 1 CVE

Kieback & Peter DDC Building Controllers

Published May 19, 2026 · Updated May 19, 2026

Vendor: Kieback & Peter Product: DDC4002 Product: DDC4002e Product: DDC4020e Product: DDC4040e Product: DDC4100 Product: DDC4200 Product: DDC4200-L Product: DDC4200e Product: DDC4400 Product: DDC4400e Product: DDC520

Summary

Successful exploitation of this vulnerability could allow an attacker to take control of the victim's browser.

Vulnerabilities 1

  • Medium 5.3
    CVE-2026-4293

    Kieback & Peter DDC Building Controllers Cross-site Scripting

    The affected Kieback & Peter DDC building controllers are vulnerable to cross-site scripting, enabling JavaScript to be executed by the victim's browser, which allows the attacker to control the browser.

    Kieback & Peter DDC4200e DDC4020e DDC4100

Revision history

  1. #1

    Initial Publication

References