漏洞描述
CIRCONTROL CirCarLife是西班牙CIRCONTROL公司的一套停车场自动化管理系统,CirCarLife可直接对/***/***.html配置文件修改,从而修改管理账户密码等信息。
CIRCONTROL CirCarLife /html/setup.html未授权配置文件修改
PoC代码
暂无相关漏洞推荐
- POC CVE-2018-12634: CirCarLife Scada <4.3 - System Log Exposure
- POC CVE-2018-16668: CirCarLife <4.3 - Improper Authentication
- POC CVE-2018-16670: CirCarLife <4.3 - Improper Authentication
- POC CVE-2018-16671: CirCarLife <4.3 - Improper Authentication
- POC CVE-2018-12634: CirCarLife Scada <4.3 - System Log Exposure
- POC CVE-2018-16668: CirCarLife <4.3 - Improper Authentication
- POC CVE-2018-16670: CirCarLife <4.3 - Improper Authentication
- POC CVE-2018-16671: CirCarLife <4.3 - Improper Authentication
- POC circarlife-installer: CirCarLife - Installer
- POC circarlife-installer: CirCarLife - Installer
- CirCarLifeScada停车场自动化管理系统log-信息泄漏(CVE-2018-12634)
- CirCarLife停车管理系统device-id页面-敏感信息泄漏(CVE-2018-16671)
- CirCarLifeScada停车场自动化管理系统values.xml-信息泄漏(CVE-2018-16670)