PT-2019-13967 · Smart Battery · Smart Battery A4

Publicado 2019-09-25 · Atualizado 2020-10-16 · CVE-2019-15068

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Smart Battery A4 firmware versions prior to r1.7.9

Description A broken access control issue allows an attacker to obtain or reset the administrator's password without authentication.

Recommendations For firmware versions prior to r1.7.9, update to version r1.7.9 or later to resolve the issue.

Correção

Missing Authentication

Improper Access Control

Enumeração de Fraquezas

CWE-306

CWE-284

Identificadores relacionados

CVE-2019-15068

Produtos afetados

Smart Battery A4

Referências · 4

• https://osv.dev/vulnerability/CVE-2019-15068 · Aviso do Fabricante
• https://twcert.org.tw/subpages/ServeThePublic/public_document_details.aspx?lang=en-US&id=45 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-15068 · Nota de Segurança
• https://tvn.twcert.org.tw/taiwanvn/TVN-201908003 · Nota