CVE-2019-15068 A broken access control vulnerability discovered in Smart Battery A4

2019-09-2400:00:00

CWE-284

twcert

www.cve.org

9.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.8%

JSON

A broken access control vulnerability in Smart Battery A4, a multifunctional portable charger, firmware version ?<= r1.7.9 allows an attacker to get/reset administrator’s password without any authentication.

CNA Affected

[
  {
    "product": "Smart Battery A4",
    "vendor": "Gigastone",
    "versions": [
      {
        "lessThanOrEqual": "r1.7.9",
        "status": "unknown",
        "version": "Firmware",
        "versionType": "custom"
      }
    ]
  }
]