Skip to content

CVE-2018-16672 An issue was discovered in CIRCONTROL CirCarLife before 4.3. Due to the storage of multiple sensitive information elements in a JSON format at /services/system/setup.json, an authenticated but unprivi...

MediumCVSS 6.5 EPSS 1.7%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

An issue was discovered in CIRCONTROL CirCarLife before 4.3. Due to the storage of multiple sensitive information elements in a JSON format at /services/system/setup.json, an authenticated but unprivileged user can exfiltrate critical setup information.

Affected products

ProductAffected versionsFixed in
circontrol circarlife scada < 4.3 4.3

References

  • github.com exploit third-party-advisory
  • 45384 exploit third-party-advisory vdb-entry