Skip to content
OpenAdvisories

Vendor

Kieback & Peter

5 known vulnerabilities.

Products

DDC4002 4 DDC4100 4 DDC4200 4 DDC4200-L 4 DDC4400 4 DDC4002e 4 DDC4200e 4 DDC4400e 4 DDC4020e 4 DDC4040e 4 Neutrino-GLT 1 DDC520 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-4293

    Kieback & Peter DDC Building Controllers Cross-site Scripting

    The affected Kieback & Peter DDC building controllers are vulnerable to cross-site scripting, enabling JavaScript to be executed by the victim's browser, which allows the attacker to control the browser.

    Kieback & Peter DDC4200e DDC4020e DDC4100
  • Medium 6.9
    CVE-2025-6225

    Command injection in Kieback&Peter Neutrino-GLT

    Kieback&Peter Neutrino-GLT product is used for building management. It's web component "SM70 PHWEB" is vulnerable to shell command injection via login form. The injected commands would execute with low privileges. The vulnerability has been fixed in version 9…

    Kieback & Peter Neutrino-GLT