Skip to content

CVE-2018-16670 An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is PLC status disclosure due to lack of authentication for /html/devstat.html.

MediumCVSS 5.3 EPSS 24.6%
Published
Updated
Exploit status
No public exploit known

Description

An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is PLC status disclosure due to lack of authentication for /html/devstat.html.

Affected products

ProductAffected versionsFixed in
circontrol circarlife scada < 4.3 4.3

References

  • github.com third-party-advisory
  • 45384 exploit third-party-advisory vdb-entry