circontrol records
10 published records for vendor circontrol.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor3
- CWE-287 Improper Authentication2
- CWE-522 Insufficiently Protected Credentials2
- CWE-121 Stack-based Buffer Overflow1
- CWE-20 Improper Input Validation1
- CWE-288 Authentication Bypass Using an Alternate Path or Channel1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
10 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
56Plan | CVE-2018-12634Proof of concept | CirCarLife Scada before 4.3 allows remote attackers to obtain sensitive information via a direct request for the html/log or services/systemcircontrol · circarlife scada · CWE-200 | Critical9.8 | — | 56.4% | Jun 21, 2018 |
40Plan | CVE-2018-17918No exploit | Circontrol CirCarLife all versions prior to 4.3.1, authentication to the device can be bypassed by entering the URL of a specific page.circontrol · circarlife firmware · CWE-288 | Critical9.8 | — | 3.8% | Nov 2, 2018 |
40Plan | CVE-2018-17922No exploit | Circontrol CirCarLife all versions prior to 4.3.1, the PAP credentials of the device are stored in clear text in a log file that is accessibcircontrol · circarlife firmware · CWE-522 | Critical9.8 | — | 3.2% | Nov 2, 2018 |
40Plan | CVE-2018-16669No exploit | An issue was discovered in CIRCONTROL Open Charge Point Protocol (OCPP) before 1.5.0, as used in CirCarLife, PowerStudio, and other productscircontrol · open charge point protocol · CWE-522 | Critical9.8 | — | 2.1% | Sep 18, 2018 |
35Monitor | CVE-2020-8006No exploit | The server in Circontrol Raption through 5.11.2 has a pre-authentication stack-based buffer overflow that can be exploited to gain run-time circontrol · raption server · CWE-121 | High8.8 | — | 1.1% | Apr 12, 2024 |
30Monitor | CVE-2018-12635No exploit | CirCarLife Scada v4.2.4 allows unauthorized upgrades via requests to the html/upgrade.html and services/system/firmware.upgrade URIs.circontrol · scada · CWE-20 | High7.5 | — | 0.8% | Jun 21, 2018 |
28Monitor | CVE-2018-16670Proof of concept | An issue was discovered in CIRCONTROL CirCarLife before 4.3.circontrol · circarlife scada · CWE-287 | Medium5.3 | — | 24.5% | Sep 18, 2018 |
27Monitor | CVE-2018-16672No exploit | An issue was discovered in CIRCONTROL CirCarLife before 4.3.circontrol · circarlife scada · CWE-200 | Medium6.5 | — | 1.7% | Sep 26, 2018 |
24Monitor | CVE-2018-16668Proof of concept | An issue was discovered in CIRCONTROL CirCarLife before 4.3.circontrol · circarlife scada · CWE-287 | Medium5.3 | — | 9.5% | Sep 18, 2018 |
24Monitor | CVE-2018-16671Proof of concept | An issue was discovered in CIRCONTROL CirCarLife before 4.3.circontrol · circarlife scada · CWE-200 | Medium5.3 | — | 8.8% | Sep 18, 2018 |
- CVE-2018-1263456Plan
CirCarLife Scada before 4.3 allows remote attackers to obtain sensitive information via a direct request for the html/log or services/system
CriticalCVSS 9.8Proof of conceptEPSS 56%circontrol · circarlife scadaJun 21, 2018
- CVE-2018-1791840Plan
Circontrol CirCarLife all versions prior to 4.3.1, authentication to the device can be bypassed by entering the URL of a specific page.
CriticalCVSS 9.8No exploitEPSS 3%circontrol · circarlife firmwareNov 2, 2018
- CVE-2018-1792240Plan
Circontrol CirCarLife all versions prior to 4.3.1, the PAP credentials of the device are stored in clear text in a log file that is accessib
CriticalCVSS 9.8No exploitEPSS 3%circontrol · circarlife firmwareNov 2, 2018
- CVE-2018-1666940Plan
An issue was discovered in CIRCONTROL Open Charge Point Protocol (OCPP) before 1.5.0, as used in CirCarLife, PowerStudio, and other products
CriticalCVSS 9.8No exploitEPSS 2%circontrol · open charge point protocolSep 18, 2018
- CVE-2020-800635Monitor
The server in Circontrol Raption through 5.11.2 has a pre-authentication stack-based buffer overflow that can be exploited to gain run-time
HighCVSS 8.8No exploitEPSS 1%circontrol · raption serverApr 12, 2024
- CVE-2018-1263530Monitor
CirCarLife Scada v4.2.4 allows unauthorized upgrades via requests to the html/upgrade.html and services/system/firmware.upgrade URIs.
HighCVSS 7.5No exploitEPSS 0%circontrol · scadaJun 21, 2018
- CVE-2018-1667028Monitor
An issue was discovered in CIRCONTROL CirCarLife before 4.3.
MediumCVSS 5.3Proof of conceptEPSS 24%circontrol · circarlife scadaSep 18, 2018
- CVE-2018-1667227Monitor
An issue was discovered in CIRCONTROL CirCarLife before 4.3.
MediumCVSS 6.5No exploitEPSS 1%circontrol · circarlife scadaSep 26, 2018
- CVE-2018-1666824Monitor
An issue was discovered in CIRCONTROL CirCarLife before 4.3.
MediumCVSS 5.3Proof of conceptEPSS 9%circontrol · circarlife scadaSep 18, 2018
- CVE-2018-1667124Monitor
An issue was discovered in CIRCONTROL CirCarLife before 4.3.
MediumCVSS 5.3Proof of conceptEPSS 8%circontrol · circarlife scadaSep 18, 2018