Lucene search
+L

183 matches found

OSV
OSV
added 2021/12/02 4:15 a.m.4 views

CVE-2021-26777

Buffer overflow vulnerability in function SetFirewall in index.cgi in CIRCUTOR COMPACT DC-S BASIC smart metering concentrator Firwmare version CIRCDCv1.2.17, allows attackers to execute arbitrary code...

9.8CVSS6AI score0.02445EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2021/12/02 4:15 a.m.3 views

CVE-2021-26777

Buffer overflow vulnerability in function SetFirewall in index.cgi in CIRCUTOR COMPACT DC-S BASIC smart metering concentrator Firwmare version CIRCDCv1.2.17, allows attackers to execute arbitrary code...

10CVSS9AI score0.02445EPSS
Exploits1References2
Prion
Prion
added 2021/12/02 4:15 a.m.18 views

Buffer overflow

Buffer overflow vulnerability in function SetFirewall in index.cgi in CIRCUTOR COMPACT DC-S BASIC smart metering concentrator Firwmare version CIRCDCv1.2.17, allows attackers to execute arbitrary code...

10CVSS9.7AI score0.02445EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2021/12/02 3:26 a.m.22 views

CVE-2021-26777

Buffer overflow vulnerability in function SetFirewall in index.cgi in CIRCUTOR COMPACT DC-S BASIC smart metering concentrator Firwmare version CIRCDCv1.2.17, allows attackers to execute arbitrary code...

10AI score0.02445EPSS
Exploits1References1
CVE
CVE
added 2021/12/02 3:26 a.m.59 views

CVE-2021-26777

CVE-2021-26777 concerns a buffer overflow in SetFirewall within index.cgi of Circutor Compact DC-S BASIC smart metering concentrator firmware CIR_CDC_v1.2.17. The flaw stems from improper data boundary handling, enabling an attacker to execute arbitrary code remotely via the device’s network inte...

10CVSS9.7AI score0.02445EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2021/12/02 12:0 a.m.6 views

Circutor Compact Dc-S Basic Smart Metering Concentrator 缓冲区错误漏洞

Circutor Compact Dc-S Basic Smart Metering Concentrator is a smart metering concentrator from Circutor Spain. A buffer error vulnerability exists in the CIRCUTOR COMPACT DC-S BASIC Smart Metering Concentrator, which stems from a failure of SetFirewall in the product index.cgi file to properly...

10CVSS9AI score0.02445EPSS
Exploits1References2
CNVD
CNVD
added 2021/06/11 12:0 a.m.26 views

Circutor SGE-PLC1000 OS Command Injection Vulnerability

Circutor SGE-PLC1000 is a smart metering system device. The primary function is to manage utility power through CIRWATT meters or other meters with PRIME technology.An operating system command injection vulnerability exists in firmware version 0.9.2b of the Circutor SGE-PLC1000, which can be...

10CVSS6AI score0.02247EPSS
Exploits0References1
OSV
OSV
added 2021/06/09 12:15 p.m.4 views

CVE-2021-33842

Improper Authentication vulnerability in the cookie parameter of Circutor SGE-PLC1000 firmware version 0.9.2b allows an attacker to perform operations as an authenticated user. In order to exploit this vulnerability, the attacker must be within the network where the device affected is located...

8.8CVSS7.3AI score0.00428EPSS
Exploits0References1
NVD
NVD
added 2021/06/09 12:15 p.m.17 views

CVE-2021-33842

Improper Authentication vulnerability in the cookie parameter of Circutor SGE-PLC1000 firmware version 0.9.2b allows an attacker to perform operations as an authenticated user. In order to exploit this vulnerability, the attacker must be within the network where the device affected is located...

8.8CVSS0.00428EPSS
Exploits0References1
Prion
Prion
added 2021/06/09 12:15 p.m.16 views

Authentication flaw

Improper Authentication vulnerability in the cookie parameter of Circutor SGE-PLC1000 firmware version 0.9.2b allows an attacker to perform operations as an authenticated user. In order to exploit this vulnerability, the attacker must be within the network where the device affected is located...

7.7CVSS8.5AI score0.00428EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/06/09 11:50 a.m.19 views

CVE-2021-33841 Circutor SGE-PLC1000 OS command Injection

SGE-PLC1000 device, in its 0.9.2b firmware version, does not handle some requests correctly, allowing a remote attacker to inject code into the operating system with maximum privileges...

10CVSS9.6AI score0.02247EPSS
Exploits0References1
Cvelist
Cvelist
added 2021/06/09 11:39 a.m.18 views

CVE-2021-33842 Circutor SGE-PLC1000 improper authentication

Improper Authentication vulnerability in the cookie parameter of Circutor SGE-PLC1000 firmware version 0.9.2b allows an attacker to perform operations as an authenticated user. In order to exploit this vulnerability, the attacker must be within the network where the device affected is located...

8.8CVSS8.7AI score0.00428EPSS
Exploits0References1
CVE
CVE
added 2021/06/09 11:39 a.m.49 views

CVE-2021-33842

CVE-2021-33842 concerns Circutor SGE-PLC1000 firmware version 0.9.2b with an improper authentication vulnerability in the cookie parameter, allowing an attacker to perform operations as an authenticated user. Exploitation requires the attacker to be on the same network as the affected device. Aff...

8.8CVSS8.6AI score0.00428EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2021/06/09 12:0 a.m.5 views

Circutor SGE-PLC1000授权问题漏洞

Circutor SGE-PLC1000 is a smart metering system device. The main function is to manage utility power through CIRWATT meters or other meters with PRIME technology.An authorization issue vulnerability exists in Circutor SGE-PLC1000 firmware version 0.9.2b, which can be exploited by attackers to pas...

8.8CVSS5.5AI score0.00428EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2021/06/09 12:0 a.m.5 views

PT-2021-20344 · Circutor · Circutor Sge-Plc1000

Name of the Vulnerable Software and Affected Versions: Circutor SGE-PLC1000 version 0.9.2b Description: The issue allows an attacker to perform operations as an authenticated user due to an improper authentication vulnerability in the cookie parameter. To exploit this, the attacker must be within...

8.8CVSS8.6AI score0.00428EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/06/09 12:0 a.m.8 views

Circutor SGE-PLC1000 操作系统命令注入漏洞

Circutor SGE-PLC1000 is a smart metering system device. The primary function is to manage utility power through CIRWATT meters or other meters with PRIME technology.An operating system command injection vulnerability exists in firmware version 0.9.2b of the Circutor SGE-PLC1000, which can be...

10CVSS5.9AI score0.02247EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2021/06/08 8:0 a.m.3 views

CVE-2021-33842

Improper Authentication vulnerability in the cookie parameter of Circutor SGE-PLC1000 firmware version 0.9.2b allows an attacker to perform operations as an authenticated user. In order to exploit this vulnerability, the attacker must be within the network where the device affected is located...

8.8CVSS7.1AI score0.00428EPSS
Exploits0References3Affected Software1
OpenVAS
OpenVAS
added 2019/02/12 12:0 a.m.18 views

Circutor PowerVision Plus Detection (Windows SMB Login)

Detects the installed version of Circutor PowerVision Plus for Windows. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.4AI score
Exploits0References1
OpenVAS
OpenVAS
added 2019/02/12 12:0 a.m.31 views

Circutor PowerStudio Scada Detection (Windows SMB Login)

Detects the installed version of Circutor PowerStudio Scada for Windows. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.4AI score
Exploits0References1
OpenVAS
OpenVAS
added 2019/02/12 12:0 a.m.29 views

Circutor PowerStudio OPC Server Detection (Windows SMB Login)

Detects the installed version of Circutor PowerStudio OPC Server for Windows. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.4AI score
Exploits0References1
Rows per page
Query Builder