PT-2019-17783 · Circuitwerkes · Circuitwerkes Sicon-8

Ph055A · Published 2019-03-15 · Updated 2020-08-24 · CVE-2019-5616

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions CircuitWerkes Sicon-8 (affected versions not specified)

Description The issue concerns the authentication mechanism implemented in JavaScript for the web-based front-end controller of the CircuitWerkes Sicon-8 device. This mechanism is executed in the context of a user's web browser.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2019-5616

Affected Products

Circuitwerkes Sicon-8

References · 2

• 🔥 https://blog.rapid7.com/2019/03/12/r7-2019-01-circuitwerkes-sicon-8-client-side-authentication-read-only-bypass-cve-2019-5616 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-5616 · Security Note