| Max CVSS | 5.0 | Min CVSS | 4.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2018-12634 | 5.0 |
CirCarLife Scada before 4.3 allows remote attackers to obtain sensitive information via a direct request for the html/log or services/system/info.html URI.
|
08-07-2021 - 15:07 | 22-06-2018 - 00:29 | |
| CVE-2018-16668 | 5.0 |
An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is internal installation path disclosure due to the lack of authentication for /html/repository.
|
08-07-2021 - 15:06 | 18-09-2018 - 20:29 | |
| CVE-2018-16672 | 4.0 |
An issue was discovered in CIRCONTROL CirCarLife before 4.3. Due to the storage of multiple sensitive information elements in a JSON format at /services/system/setup.json, an authenticated but unprivileged user can exfiltrate critical setup informati
|
08-07-2021 - 15:05 | 26-09-2018 - 17:29 | |
| CVE-2018-16669 | 5.0 |
An issue was discovered in CIRCONTROL Open Charge Point Protocol (OCPP) before 1.5.0, as used in CirCarLife, PowerStudio, and other products. Due to storage of credentials in XML files, an unprivileged user can look at /services/config/config.xml for
|
03-10-2019 - 00:03 | 18-09-2018 - 20:29 | |
| CVE-2018-16670 | 5.0 |
An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is PLC status disclosure due to lack of authentication for /html/devstat.html.
|
07-11-2018 - 18:05 | 18-09-2018 - 20:29 | |
| CVE-2018-16671 | 5.0 |
An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is system software information disclosure due to lack of authentication for /html/device-id.
|
07-11-2018 - 17:54 | 18-09-2018 - 20:29 |