Vulnerabilities

TI-2018-12753 CVE-2018-17922 · GHSA-fwcc-h488-hgmh

Insufficiently protected credentials in Circontrol CirCarLife all versions prior to 4.3.1

MEDIUM 48

Circontrol CirCarLife all versions prior to 4.3.1, the PAP credentials of the device are stored in clear text in a log file that is accessible without authentication.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03245 Published 2018-11-02 No fix listed CWE-522

TI-2018-12750 CVE-2018-17918 · GHSA-jhc3-4262-c357

Authentication bypass in Circontrol CirCarLife all versions prior to 4.3.1

MEDIUM 49

Circontrol CirCarLife all versions prior to 4.3.1, authentication to the device can be bypassed by entering the URL of a specific page.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03805 Published 2018-11-02 No fix listed CWE-288

Vulnerabilities

Filters

Insufficiently protected credentials in Circontrol CirCarLife all versions prior to 4.3.1

Authentication bypass in Circontrol CirCarLife all versions prior to 4.3.1