PT-2019-13968 · Smart · Smart Battery A4

Publicado 2019-09-25 · Atualizado 2020-08-24 · CVE-2019-15069

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Smart Battery A4 firmware versions prior to r1.7.9

Description An issue was found in the authentication interface of the Smart Battery A4, allowing an attacker to bypass authentication and gain management privileges for the web page without modifying the device's files.

Recommendations For firmware versions prior to r1.7.9, update to a version newer than r1.7.9 to resolve the issue.

Correção

Identificadores relacionados

CVE-2019-15069

Produtos afetados

Smart Battery A4

Referências · 4

• https://twcert.org.tw/subpages/ServeThePublic/public_document_details.aspx?lang=en-US&id=46 · Nota
• https://tvn.twcert.org.tw/taiwanvn/TVN-201908004 · Nota
• https://osv.dev/vulnerability/CVE-2019-15069 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-15069 · Nota de Segurança