PT-2019-13967 · Smart Battery · Smart Battery A4

Published 2019-09-25 · Updated 2020-10-16 · CVE-2019-15068

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Smart Battery A4 firmware versions prior to r1.7.9

Description A broken access control issue allows an attacker to obtain or reset the administrator's password without authentication.

Recommendations For firmware versions prior to r1.7.9, update to version r1.7.9 or later to resolve the issue.

Fix

Missing Authentication

Improper Access Control

Weakness Enumeration

CWE-306

CWE-284

Related Identifiers

CVE-2019-15068

Affected Products

Smart Battery A4

References · 4

• https://osv.dev/vulnerability/CVE-2019-15068 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-15068 · Security Note
• https://twcert.org.tw/subpages/ServeThePublic/public_document_details.aspx?lang=en-US&id=45 · Note
• https://tvn.twcert.org.tw/taiwanvn/TVN-201908003 · Note