CVE-2018-12635: Improper Input Validation

CirCarLife Scada v4.2.4 allows unauthorized upgrades via requests to the html/upgrade.html and services/system/firmware.upgrade URIs...

PT-2018-11299

Name of the Vulnerable Software and Affected Versions CirCarLife Scada version 4.2.4 Description The issue allows unauthorized upgrades through specific requests. This can be achieved by sending requests to the "html/upgrade.html" and "services/system/firmware.upgrade" API endpoints...