PT-2019-13968 · Smart · Smart Battery A4

Published 2019-09-25 · Updated 2020-08-24 · CVE-2019-15069

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Smart Battery A4 firmware versions prior to r1.7.9

Description An issue was found in the authentication interface of the Smart Battery A4, allowing an attacker to bypass authentication and gain management privileges for the web page without modifying the device's files.

Recommendations For firmware versions prior to r1.7.9, update to a version newer than r1.7.9 to resolve the issue.

Fix

Related Identifiers

CVE-2019-15069

Affected Products

Smart Battery A4

References · 4

• https://osv.dev/vulnerability/CVE-2019-15069 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-15069 · Security Note
• https://twcert.org.tw/subpages/ServeThePublic/public_document_details.aspx?lang=en-US&id=46 · Note
• https://tvn.twcert.org.tw/taiwanvn/TVN-201908004 · Note