Записи circontrol
10 опубликованных записей вендора circontrol.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 0
- С записью об исправлении
- 0 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Повторяющиеся классы
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor3
- CWE-287 Improper Authentication2
- CWE-522 Insufficiently Protected Credentials2
- CWE-121 Stack-based Buffer Overflow1
- CWE-20 Improper Input Validation1
- CWE-288 Authentication Bypass Using an Alternate Path or Channel1
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
10 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
56В плане | CVE-2018-12634Proof of concept | CirCarLife Scada before 4.3 allows remote attackers to obtain sensitive information via a direct request for the html/log or services/systemcircontrol · circarlife scada · CWE-200 | Критическая9,8 | — | 56,4 % | 21 июн. 2018 г. |
40В плане | CVE-2018-17918Эксплойта нет | Circontrol CirCarLife all versions prior to 4.3.1, authentication to the device can be bypassed by entering the URL of a specific page.circontrol · circarlife firmware · CWE-288 | Критическая9,8 | — | 3,8 % | 2 нояб. 2018 г. |
40В плане | CVE-2018-17922Эксплойта нет | Circontrol CirCarLife all versions prior to 4.3.1, the PAP credentials of the device are stored in clear text in a log file that is accessibcircontrol · circarlife firmware · CWE-522 | Критическая9,8 | — | 3,2 % | 2 нояб. 2018 г. |
40В плане | CVE-2018-16669Эксплойта нет | An issue was discovered in CIRCONTROL Open Charge Point Protocol (OCPP) before 1.5.0, as used in CirCarLife, PowerStudio, and other productscircontrol · open charge point protocol · CWE-522 | Критическая9,8 | — | 2,1 % | 18 сент. 2018 г. |
35Наблюдать | CVE-2020-8006Эксплойта нет | The server in Circontrol Raption through 5.11.2 has a pre-authentication stack-based buffer overflow that can be exploited to gain run-time circontrol · raption server · CWE-121 | Высокая8,8 | — | 1,1 % | 12 апр. 2024 г. |
30Наблюдать | CVE-2018-12635Эксплойта нет | CirCarLife Scada v4.2.4 allows unauthorized upgrades via requests to the html/upgrade.html and services/system/firmware.upgrade URIs.circontrol · scada · CWE-20 | Высокая7,5 | — | 0,8 % | 21 июн. 2018 г. |
28Наблюдать | CVE-2018-16670Proof of concept | An issue was discovered in CIRCONTROL CirCarLife before 4.3.circontrol · circarlife scada · CWE-287 | Средняя5,3 | — | 24,5 % | 18 сент. 2018 г. |
27Наблюдать | CVE-2018-16672Эксплойта нет | An issue was discovered in CIRCONTROL CirCarLife before 4.3.circontrol · circarlife scada · CWE-200 | Средняя6,5 | — | 1,7 % | 26 сент. 2018 г. |
24Наблюдать | CVE-2018-16668Proof of concept | An issue was discovered in CIRCONTROL CirCarLife before 4.3.circontrol · circarlife scada · CWE-287 | Средняя5,3 | — | 9,5 % | 18 сент. 2018 г. |
24Наблюдать | CVE-2018-16671Proof of concept | An issue was discovered in CIRCONTROL CirCarLife before 4.3.circontrol · circarlife scada · CWE-200 | Средняя5,3 | — | 8,8 % | 18 сент. 2018 г. |
- CVE-2018-1263456В плане
CirCarLife Scada before 4.3 allows remote attackers to obtain sensitive information via a direct request for the html/log or services/system
КритическаяCVSS 9,8Proof of conceptEPSS 56 %circontrol · circarlife scada21 июн. 2018 г.
- CVE-2018-1791840В плане
Circontrol CirCarLife all versions prior to 4.3.1, authentication to the device can be bypassed by entering the URL of a specific page.
КритическаяCVSS 9,8Эксплойта нетEPSS 3 %circontrol · circarlife firmware2 нояб. 2018 г.
- CVE-2018-1792240В плане
Circontrol CirCarLife all versions prior to 4.3.1, the PAP credentials of the device are stored in clear text in a log file that is accessib
КритическаяCVSS 9,8Эксплойта нетEPSS 3 %circontrol · circarlife firmware2 нояб. 2018 г.
- CVE-2018-1666940В плане
An issue was discovered in CIRCONTROL Open Charge Point Protocol (OCPP) before 1.5.0, as used in CirCarLife, PowerStudio, and other products
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %circontrol · open charge point protocol18 сент. 2018 г.
- CVE-2020-800635Наблюдать
The server in Circontrol Raption through 5.11.2 has a pre-authentication stack-based buffer overflow that can be exploited to gain run-time
ВысокаяCVSS 8,8Эксплойта нетEPSS 1 %circontrol · raption server12 апр. 2024 г.
- CVE-2018-1263530Наблюдать
CirCarLife Scada v4.2.4 allows unauthorized upgrades via requests to the html/upgrade.html and services/system/firmware.upgrade URIs.
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %circontrol · scada21 июн. 2018 г.
- CVE-2018-1667028Наблюдать
An issue was discovered in CIRCONTROL CirCarLife before 4.3.
СредняяCVSS 5,3Proof of conceptEPSS 24 %circontrol · circarlife scada18 сент. 2018 г.
- CVE-2018-1667227Наблюдать
An issue was discovered in CIRCONTROL CirCarLife before 4.3.
СредняяCVSS 6,5Эксплойта нетEPSS 1 %circontrol · circarlife scada26 сент. 2018 г.
- CVE-2018-1666824Наблюдать
An issue was discovered in CIRCONTROL CirCarLife before 4.3.
СредняяCVSS 5,3Proof of conceptEPSS 9 %circontrol · circarlife scada18 сент. 2018 г.
- CVE-2018-1667124Наблюдать
An issue was discovered in CIRCONTROL CirCarLife before 4.3.
СредняяCVSS 5,3Proof of conceptEPSS 8 %circontrol · circarlife scada18 сент. 2018 г.