CVE-2019-18867

7.5 highEPSS 1.2%

High (7.5) in blaauwproducts remote kiln control. EPSS 1.2% chance of exploitation in the next 30 days.

Browsable directories in Blaauw Remote Kiln Control through v3.00r4 allow an attacker to enumerate sensitive filenames and locations, including source code. This affects /ajax/, /common/, /engine/, /flash/, /images/, /Images/, /jscripts/, /lang/, /layout/, /programs/, and /sms/.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2020-05-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

blaauwproducts:remote_kiln_control

References

https://github.com/lodestone-security/CVEs/blob/master/remote_kiln_control/an_unfortunate_kilnundrum.md
https://github.com/lodestone-security/CVEs/blob/master/remote_kiln_control/an_unfortunate_kilnundrum.md

Check your stack JSON