CVE-2021-33842CWE-565

Circutor SGE-PLC1000 improper authentication

High · published June 9, 2021

CVSS v3.1
8.8
EPSS
0%
Percentile
36.0
In the wild
Unconfirmed
What it is

Improper Authentication vulnerability in the cookie parameter of Circutor SGE-PLC1000 firmware version 0.9.2b allows an attacker to perform operations as an authenticated user. In order to exploit this vulnerability, the attacker must be within the network where the device affected is located.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00428 · 36.0th percentile
Weakness
CWE-565 · Reliance on Cookies without Validation and Integrity Checking
Published
2021-06-09T11:39Z
EPSS history
Timeline
  • 09 JUN 11:39Z
    Circutor SGE-PLC1000 improper authentication
    cvelistv5