CVE-2019-15067: Undefined Security Weakness

An authentication bypass vulnerability discovered in Smart Battery A2-25DE, a multifunctional portable charger, firmware version ?= SECFS-2013-10-16-13:42:58-629c30ee-60c68be6. An attacker can bypass authentication and gain privilege by modifying the login page...

CVE-2019-15068: Improper Access Control

A broken access control vulnerability in Smart Battery A4, a multifunctional portable charger, firmware version ?= r1.7.9 allows an attacker to get/reset administrator’s password without any authentication...

CVE-2019-15069: Undefined Security Weakness

An unsafe authentication interface was discovered in Smart Battery A4, a multifunctional portable charger, firmware version ?= r1.7.9 . An attacker can bypass authentication without modifying device file and gain web page management privilege...

PT-2019-13968

Name of the Vulnerable Software and Affected Versions Smart Battery A4 firmware versions prior to r1.7.9 Description An issue was found in the authentication interface of the Smart Battery A4, allowing an attacker to bypass authentication and gain management privileges for the web page without...

PT-2019-13967

Name of the Vulnerable Software and Affected Versions Smart Battery A4 firmware versions prior to r1.7.9 Description A broken access control issue allows an attacker to obtain or reset the administrator's password without authentication. Recommendations For firmware versions prior to r1.7.9, upda...

PT-2019-13966

Name of the Vulnerable Software and Affected Versions Smart Battery A2-25DE firmware version ?= SECFS-2013-10-16-13:42:58-629c30ee-60c68be6 Description An authentication bypass issue has been discovered, allowing an attacker to bypass authentication and gain privileges by modifying the login page...