Circontrol

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Circontrol records in CISA KEV

No Circontrol vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Circarlife Scada 5 records HIGH Circarlife Firmware 2 records MEDIUM Open Charge Point Protocol 1 record MEDIUM Raption Server 1 record MEDIUM Scada 1 record LOW

Records

2 records in Circarlife Firmware · all components

TI-2018-12750 CVE-2018-17918 · GHSA-jhc3-4262-c357

Authentication bypass in Circontrol CirCarLife all versions prior to 4.3.1

MEDIUM 49

Circontrol CirCarLife all versions prior to 4.3.1, authentication to the device can be bypassed by entering the URL of a specific page.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03805 Published 2018-11-02 No fix listed CWE-288

TI-2018-12753 CVE-2018-17922 · GHSA-fwcc-h488-hgmh

Insufficiently protected credentials in Circontrol CirCarLife all versions prior to 4.3.1

MEDIUM 48

Circontrol CirCarLife all versions prior to 4.3.1, the PAP credentials of the device are stored in clear text in a log file that is accessible without authentication.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03245 Published 2018-11-02 No fix listed CWE-522

Open these records in search →

Critical	4
High	2
Medium	4
Low	0
No CVSS	0