What’s Vulnerable › Vulnerabilities

CVE-2022-26519: Interlogix Hills ComNav Improper Restriction of Excessive Authentication Attempts

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-04-20 · updated 2026-06-17
• Weakness: CWE-307

Description

There is no limit to the number of attempts to authenticate for the local configuration pages for the Hills ComNav Version 3002-19 interface, which allows local attackers to brute-force credentials.

Affected products

• Interlogix ComNav: through 3002-19

References

• https://www.corporate.carrier.com/Images/CARR-PSA-Hills-ComNav-002-1121_tcm558-149392.pdf
• https://www.corporate.carrier.com/Images/CARR-PSA-Hills-ComNav-002-1121_tcm558-149392.pdf

Get alerted when CVE-2022-26519 or the next vulnerability affects your stack