Unspecified Vulnerability in CIRCONTROL CirCarLife

CIRCONTROL CirCarLife is a parking lot automation system from CIRCONTROL, Spain. A security vulnerability exists in CIRCONTROL CirCarLife versions prior to 4.3.1. An attacker can exploit the vulnerability by entering a URL to bypass device authentication...

Authentication flaw

Circontrol CirCarLife all versions prior to 4.3.1, authentication to the device can be bypassed by entering the URL of a specific page...

CVE-2018-17918

Circontrol CirCarLife all versions prior to 4.3.1, authentication to the device can be bypassed by entering the URL of a specific page...

CVE-2018-17918

Circontrol CirCarLife all versions prior to 4.3.1, authentication to the device can be bypassed by entering the URL of a specific page...

Authentication flaw

Circontrol CirCarLife all versions prior to 4.3.1, the PAP credentials of the device are stored in clear text in a log file that is accessible without authentication...

CVE-2018-17922

Circontrol CirCarLife all versions prior to 4.3.1, the PAP credentials of the device are stored in clear text in a log file that is accessible without authentication...

CVE-2018-17918

Circontrol CirCarLife vulnerability (CVE-2018-17918) affects all versions prior to 4.3.1. An authentication bypass is possible by entering the URL of a specific page, enabling remote access to the device. ICSA-18-305-03 documents a CVSS v3 base score of 10.0 (high severity) and confirms remote, u...

CVE-2018-17922

CVE-2018-17922 affects Circontrol CirCarLife: all versions before 4.3.1. The PAP credentials are stored in clear text in a log file that is accessible without authentication, enabling credential exposure. NVD lists a CVSSv3 base score of 9.8 (CRITICAL) with remote, unauthenticated access and impa...

CVE-2018-17922

Circontrol CirCarLife all versions prior to 4.3.1, the PAP credentials of the device are stored in clear text in a log file that is accessible without authentication...

CVE-2018-17918

Circontrol CirCarLife all versions prior to 4.3.1, authentication to the device can be bypassed by entering the URL of a specific page...

Circontrol CirCarLife

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Circontrol Equipment: CirCarLife Vulnerabilities: Authentication Bypass Using an Alternate Path or Channel, Insufficiently Protected Credentials 2. RISK EVALUATION Successful exploitation of these...

CVE-2018-16672

An issue was discovered in CIRCONTROL CirCarLife before 4.3. Due to the storage of multiple sensitive information elements in a JSON format at /services/system/setup.json, an authenticated but unprivileged user can exfiltrate critical setup information...

Information disclosure

An issue was discovered in CIRCONTROL CirCarLife before 4.3. Due to the storage of multiple sensitive information elements in a JSON format at /services/system/setup.json, an authenticated but unprivileged user can exfiltrate critical setup information...

CVE-2018-16672

The CVE-2018-16672 entry concerns CirControl CirCarLife prior to version 4.3. An authenticated but unprivileged user can exfiltrate critical setup information due to storing multiple sensitive information elements in JSON at /services/system/setup.json. This information disclosure is described ac...

CVE-2018-16672

An issue was discovered in CIRCONTROL CirCarLife before 4.3. Due to the storage of multiple sensitive information elements in a JSON format at /services/system/setup.json, an authenticated but unprivileged user can exfiltrate critical setup information...

CirCarlife Scada Information Disclosure Vulnerability (CNVD-2018-19569)

CIRCONTROL CirCarLife is a parking lot automation management system from Circontrol, Spain. A security vulnerability exists in CIRCONTROL CirCarLife versions prior to 4.3 that stems from the program's lack of authentication of the /html/devstat.html file. A remote attacker could exploit the...

CVE-2018-16670

An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is PLC status disclosure due to lack of authentication for /html/devstat.html...

CVE-2018-16671

An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is system software information disclosure due to lack of authentication for /html/device-id...

CVE-2018-16670

An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is PLC status disclosure due to lack of authentication for /html/devstat.html...

CVE-2018-16669

An issue was discovered in CIRCONTROL Open Charge Point Protocol OCPP before 1.5.0, as used in CirCarLife, PowerStudio, and other products. Due to storage of credentials in XML files, an unprivileged user can look at /services/config/config.xml for the admin credentials of the ocpp and circarlife...