EUVD-2018-8474

Malware in sbrugna...

EUVD-2018-9659

Malware in sbrugna...

CVE-2018-17918

Circontrol CirCarLife all versions prior to 4.3.1, authentication to the device can be bypassed by entering the URL of a specific page...

Authentication flaw

Circontrol CirCarLife all versions prior to 4.3.1, the PAP credentials of the device are stored in clear text in a log file that is accessible without authentication...

CVE-2018-17922

CVE-2018-17922 affects Circontrol CirCarLife: all versions before 4.3.1. The PAP credentials are stored in clear text in a log file that is accessible without authentication, enabling credential exposure. NVD lists a CVSSv3 base score of 9.8 (CRITICAL) with remote, unauthenticated access and impa...

PT-2018-14274

Name of the Vulnerable Software and Affected Versions Circontrol CirCarLife versions prior to 4.3.1 Description The issue concerns the storage of PAP credentials in clear text within a log file. This log file is accessible without requiring authentication, potentially exposing sensitive...

CVE-2018-17922: Insufficiently Protected Credentials

Circontrol CirCarLife all versions prior to 4.3.1, the PAP credentials of the device are stored in clear text in a log file that is accessible without authentication...

PT-2018-14270

Name of the Vulnerable Software and Affected Versions Circontrol CirCarLife versions prior to 4.3.1 Description The issue allows authentication to the device to be bypassed by entering the URL of a specific page. Recommendations For versions prior to 4.3.1, update to version 4.3.1 or later to...

CVE-2018-17918: Authentication Bypass Using an Alternate Path or Channel

Circontrol CirCarLife all versions prior to 4.3.1, authentication to the device can be bypassed by entering the URL of a specific page...

PT-2018-13689

Name of the Vulnerable Software and Affected Versions CIRCONTROL CirCarLife versions prior to 4.3 Description An issue allows an authenticated but unprivileged user to exfiltrate critical setup information due to the storage of sensitive information elements in a JSON format at the...

CVE-2018-16672: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in CIRCONTROL CirCarLife before 4.3. Due to the storage of multiple sensitive information elements in a JSON format at /services/system/setup.json, an authenticated but unprivileged user can exfiltrate critical setup information...

CVE-2018-16670

An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is PLC status disclosure due to lack of authentication for /html/devstat.html...

CVE-2018-16671

An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is system software information disclosure due to lack of authentication for /html/device-id...

CVE-2018-16671

An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is system software information disclosure due to lack of authentication for /html/device-id...

Information disclosure

An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is system software information disclosure due to lack of authentication for /html/device-id...

CVE-2018-16671

An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is system software information disclosure due to lack of authentication for /html/device-id...

CVE-2018-16670

An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is PLC status disclosure due to lack of authentication for /html/devstat.html...

CVE-2018-16668

An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is internal installation path disclosure due to the lack of authentication for /html/repository...

CVE-2018-16668: Improper Authentication

An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is internal installation path disclosure due to the lack of authentication for /html/repository...

PT-2018-13684

Name of the Vulnerable Software and Affected Versions CIRCONTROL CirCarLife versions prior to 4.3 Description An issue was discovered due to the lack of authentication for the "/html/repository" API endpoint, leading to internal installation path disclosure. Recommendations For versions prior to...