Design/Logic Flaw

An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is PLC status disclosure due to lack of authentication for /html/devstat.html...

CVE-2018-16670: Improper Authentication

An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is PLC status disclosure due to lack of authentication for /html/devstat.html...

PT-2018-13687

Name of the Vulnerable Software and Affected Versions CIRCONTROL CirCarLife versions prior to 4.3 Description An issue was discovered that allows PLC status disclosure due to a lack of authentication for the "/html/devstat.html" API endpoint. Recommendations For versions prior to 4.3, update to...