CVE-2019-5616 - CircuitWerkes Sicon-8 Client-Side Authentication Read-Only Bypass

Back Back to CVE browser

MEDIUM

CircuitWerkes Sicon-8 Client-Side Authentication Read-Only Bypass

Published Mar 15, 2019

5.3

MEDIUM

CVSS 3.0

EPSS 1.28%

Description

CircuitWerkes Sicon-8, a hardware device used for managing electrical devices, ships with a web-based front-end controller and implements an authentication mechanism in JavaScript that is run in the context of a user's web browser.

Affected products

Remediation

Vendor solution

Users of the Sicon-8 should not expose the web-based management console to untrusted networks.

Weaknesses (0)

No CWE recorded.

References (2)

https://blog.rapid7.com/2019/03/12/r7-2019-01-circuitwerkes-sicon-8-client-side-authentication-read-only-bypass-cve-2019-5616/
x_refsource_MISCExploitThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-15191
Advisory

Link	Providers	Tags
https://blog.rapid7.com/2019/03/12/r7-2019-01-circuitwerkes-sicon-8-client-side-authentication-read-only-bypass-cve-2019-5616/		x_refsource_MISCExploitThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-15191		Advisory