CVE-2018-17922 Information disclosure in Circontrol CirCarLife all versions prior to 4.3.1
Attackers can read clear-text PAP credentials from an unauthenticated log file, potentially leading to unauthorized access to the charging station.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-17922?
CVE-2018-17922 is a critical vulnerability in unknown Circontrol CirCarLife all versions prior to 4.3.1, published on 2 Nov 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Circontrol CirCarLife all versions prior to 4.3.1, the PAP credentials of the device are stored in clear text in a log file that is accessible without authentication.
Which versions are affected by CVE-2018-17922?
It affects 1 product.
Products include Circontrol Circarlife Firmware.
How do I fix CVE-2018-17922?
No fix has been published for CVE-2018-17922 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-17922 being exploited?
There is no known exploitation of CVE-2018-17922 in the wild and no public exploit code.
Other vulnerabilities in unknown Circontrol CirCarLife all versions prior to 4.3.1
Sources
Also known as GHSA-fwcc-h488-hgmh.