circontrol kayıtları
circontrol üreticisine ait 10 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor3
- CWE-287 Improper Authentication2
- CWE-522 Insufficiently Protected Credentials2
- CWE-121 Stack-based Buffer Overflow1
- CWE-20 Improper Input Validation1
- CWE-288 Authentication Bypass Using an Alternate Path or Channel1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
56Planlayın | CVE-2018-12634Kavram kanıtı | CirCarLife Scada before 4.3 allows remote attackers to obtain sensitive information via a direct request for the html/log or services/systemcircontrol · circarlife scada · CWE-200 | Kritik9,8 | — | %56,4 | 21 Haz 2018 |
40Planlayın | CVE-2018-17918İstismar yok | Circontrol CirCarLife all versions prior to 4.3.1, authentication to the device can be bypassed by entering the URL of a specific page.circontrol · circarlife firmware · CWE-288 | Kritik9,8 | — | %3,8 | 2 Kas 2018 |
40Planlayın | CVE-2018-17922İstismar yok | Circontrol CirCarLife all versions prior to 4.3.1, the PAP credentials of the device are stored in clear text in a log file that is accessibcircontrol · circarlife firmware · CWE-522 | Kritik9,8 | — | %3,2 | 2 Kas 2018 |
40Planlayın | CVE-2018-16669İstismar yok | An issue was discovered in CIRCONTROL Open Charge Point Protocol (OCPP) before 1.5.0, as used in CirCarLife, PowerStudio, and other productscircontrol · open charge point protocol · CWE-522 | Kritik9,8 | — | %2,1 | 18 Eyl 2018 |
35İzleyin | CVE-2020-8006İstismar yok | The server in Circontrol Raption through 5.11.2 has a pre-authentication stack-based buffer overflow that can be exploited to gain run-time circontrol · raption server · CWE-121 | Yüksek8,8 | — | %1,1 | 12 Nis 2024 |
30İzleyin | CVE-2018-12635İstismar yok | CirCarLife Scada v4.2.4 allows unauthorized upgrades via requests to the html/upgrade.html and services/system/firmware.upgrade URIs.circontrol · scada · CWE-20 | Yüksek7,5 | — | %0,8 | 21 Haz 2018 |
28İzleyin | CVE-2018-16670Kavram kanıtı | An issue was discovered in CIRCONTROL CirCarLife before 4.3.circontrol · circarlife scada · CWE-287 | Orta5,3 | — | %24,5 | 18 Eyl 2018 |
27İzleyin | CVE-2018-16672İstismar yok | An issue was discovered in CIRCONTROL CirCarLife before 4.3.circontrol · circarlife scada · CWE-200 | Orta6,5 | — | %1,7 | 26 Eyl 2018 |
24İzleyin | CVE-2018-16668Kavram kanıtı | An issue was discovered in CIRCONTROL CirCarLife before 4.3.circontrol · circarlife scada · CWE-287 | Orta5,3 | — | %9,5 | 18 Eyl 2018 |
24İzleyin | CVE-2018-16671Kavram kanıtı | An issue was discovered in CIRCONTROL CirCarLife before 4.3.circontrol · circarlife scada · CWE-200 | Orta5,3 | — | %8,8 | 18 Eyl 2018 |
- CVE-2018-1263456Planlayın
CirCarLife Scada before 4.3 allows remote attackers to obtain sensitive information via a direct request for the html/log or services/system
KritikCVSS 9,8Kavram kanıtıEPSS %56circontrol · circarlife scada21 Haz 2018
- CVE-2018-1791840Planlayın
Circontrol CirCarLife all versions prior to 4.3.1, authentication to the device can be bypassed by entering the URL of a specific page.
KritikCVSS 9,8İstismar yokEPSS %3circontrol · circarlife firmware2 Kas 2018
- CVE-2018-1792240Planlayın
Circontrol CirCarLife all versions prior to 4.3.1, the PAP credentials of the device are stored in clear text in a log file that is accessib
KritikCVSS 9,8İstismar yokEPSS %3circontrol · circarlife firmware2 Kas 2018
- CVE-2018-1666940Planlayın
An issue was discovered in CIRCONTROL Open Charge Point Protocol (OCPP) before 1.5.0, as used in CirCarLife, PowerStudio, and other products
KritikCVSS 9,8İstismar yokEPSS %2circontrol · open charge point protocol18 Eyl 2018
- CVE-2020-800635İzleyin
The server in Circontrol Raption through 5.11.2 has a pre-authentication stack-based buffer overflow that can be exploited to gain run-time
YüksekCVSS 8,8İstismar yokEPSS %1circontrol · raption server12 Nis 2024
- CVE-2018-1263530İzleyin
CirCarLife Scada v4.2.4 allows unauthorized upgrades via requests to the html/upgrade.html and services/system/firmware.upgrade URIs.
YüksekCVSS 7,5İstismar yokEPSS %0circontrol · scada21 Haz 2018
- CVE-2018-1667028İzleyin
An issue was discovered in CIRCONTROL CirCarLife before 4.3.
OrtaCVSS 5,3Kavram kanıtıEPSS %24circontrol · circarlife scada18 Eyl 2018
- CVE-2018-1667227İzleyin
An issue was discovered in CIRCONTROL CirCarLife before 4.3.
OrtaCVSS 6,5İstismar yokEPSS %1circontrol · circarlife scada26 Eyl 2018
- CVE-2018-1666824İzleyin
An issue was discovered in CIRCONTROL CirCarLife before 4.3.
OrtaCVSS 5,3Kavram kanıtıEPSS %9circontrol · circarlife scada18 Eyl 2018
- CVE-2018-1667124İzleyin
An issue was discovered in CIRCONTROL CirCarLife before 4.3.
OrtaCVSS 5,3Kavram kanıtıEPSS %8circontrol · circarlife scada18 Eyl 2018