CVE-2019-5616

Summary

CircuitWerkes Sicon-8, a hardware device used for managing electrical devices, ships with a web-based front-end controller and implements an authentication mechanism in JavaScript that is run in the context of a user's web browser.

Affected Software

Weaknesses

• n/a

Workarounds

Users of the Sicon-8 should not expose the web-based management console to untrusted networks.

ADP Enrichment

CVE Program Container

Additional References

• https://blog.rapid7.com/2019/03/12/r7-2019-01-circuitwerkes-sicon-8-client-side-authentication-read-only-bypass-cve-2019-5616/

References

• https://blog.rapid7.com/2019/03/12/r7-2019-01-circuitwerkes-sicon-8-client-side-authentication-read-only-bypass-cve-2019-5616/

• ←Previous
• Next→