CVE-2021-33842
8.8
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
Improper Authentication vulnerability in the cookie parameter of Circutor SGE-PLC1000 firmware version 0.9.2b allows an attacker to perform operations as an authenticated user. In order to exploit this vulnerability, the attacker must be within the network where the device affected is located.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Circutor | SGE-PLC1000 | 0.9.2b | affected |
Weaknesses
- CWE-565: CWE-565 Reliance on Cookies without Validation and Integrity Checking
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.