CVE-2019-18870: Blaauwproducts Remote Kiln Control

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

A path traversal via the iniFile parameter in excel.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to download arbitrary files from the host machine.

Affected products

• Blaauwproducts Remote Kiln Control: before 3.0.0 (fixed in 3.0.0); version 3.0.0 only

Published 2020-05-07. Last modified 2026-06-17.