CVE-2019-18871: Blaauwproducts Remote Kiln Control

High severity, CVSS 8.8. EPSS: 2.5% chance of exploitation in the next 30 days.

A path traversal in debug.php accessed via default.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to upload arbitrary files, leading to arbitrary remote code execution.

Affected products

• Blaauwproducts Remote Kiln Control: version 3.0.0 only; up to and including 3.0.0

Published 2020-05-07. Last modified 2026-06-17.