CVE-2020-7233: Kmccontrols Bac-a1616bc Firmware

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

KMS Controls BAC-A1616BC BACnet devices have a cleartext password of snowman in the BACKDOOR_NAME variable in the BC_Logon.swf file.

Affected products

• Kmccontrols Bac-a1616bc Firmware: affected versions not specified

Published 2020-01-19. Last modified 2026-06-17.