CirCarLife Auth Bypass (CVE-2018-16670)

Exploits CVE-2018-16670 in CirCarLife 4.3: unauthenticated access to /html/devstat.html and /services/user/values.xml exposes PLC status data. !/usr/bin/env python3 -- coding: utf-8 -- """CirCarLife devstat auth bypass CVE-2018-16670.""" from kittysploit import from lib.protocols.http.httpclient...

CirCarLife <4.3 - Improper Authentication Detection

CirCarLife before 4.3 is susceptible to improper authentication. A PLC status disclosure exists due to lack of authentication for /html/devstat.html. An attacker can obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 --...

VulnCheck KEV: CVE-2018-16670

An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is PLC status disclosure due to lack of authentication for /html/devstat.html...

AutomationDirect P3-550E Telnet Diagnostic Interface leftover debug code vulnerability

Talos Vulnerability Report TALOS-2024-1942 AutomationDirect P3-550E Telnet Diagnostic Interface leftover debug code vulnerability May 28, 2024 CVE Number CVE-2024-21785 SUMMARY A leftover debug code vulnerability exists in the Telnet Diagnostic Interface functionality of AutomationDirect P3-550E...

CirCarlife Scada Information Disclosure Vulnerability (CNVD-2018-19569)

CIRCONTROL CirCarLife is a parking lot automation management system from Circontrol, Spain. A security vulnerability exists in CIRCONTROL CirCarLife versions prior to 4.3 that stems from the program's lack of authentication of the /html/devstat.html file. A remote attacker could exploit the...

CVE-2018-16670

An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is PLC status disclosure due to lack of authentication for /html/devstat.html...

Design/Logic Flaw

An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is PLC status disclosure due to lack of authentication for /html/devstat.html...

PT-2018-13687

Name of the Vulnerable Software and Affected Versions CIRCONTROL CirCarLife versions prior to 4.3 Description An issue was discovered that allows PLC status disclosure due to a lack of authentication for the "/html/devstat.html" API endpoint. Recommendations For versions prior to 4.3, update to...

CVE-2018-16670: Improper Authentication

An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is PLC status disclosure due to lack of authentication for /html/devstat.html...

CirCarLife SCADA 4.3.0 - Credential Disclosure

Exploit Title: CirCarLife SCADA 4.3.0 - Credential Disclosure Date: 2018-09-10 Exploit Author: David Castro Vendor Homepage: https://circontrol.com/ Shodan Dork: Server: CirCarLife Server: PsiOcppApp Version: CirCarLife Scada all versions under 4.3.0 OCPP implementation all versions under 1.5.0 C...

Phoenix Contact ILC 150 ETH PLC - Remote Control Script

Phoenix Contact ILC 150 ETH PLC - Remote Control Script ! /usr/bin/env python ''' Exploit Title: Phoenix Contact ILC 150 ETH PLC Remote Control script Date: 2015-05-19 Exploit Author: Photubias - tijldotdeneutathowestdotbe Vendor Homepage:...