Vulnerability Description
An authentication bypass vulnerability discovered in Smart Battery A2-25DE, a multifunctional portable charger, firmware version ?<= SECFS-2013-10-16-13:42:58-629c30ee-60c68be6. An attacker can bypass authentication and gain privilege by modifying the login page.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Gigastone | Smart Battery A2-25De Firmware | <= 2013-10-16 |
| Gigastone | Smart Battery A2-25De | - |
References
- https://tvn.twcert.org.tw/taiwanvn/TVN-201908002Third Party Advisory
- https://www.twcert.org.tw/subpages/ServeThePublic/public_document_details.aspx?lThird Party Advisory
- https://tvn.twcert.org.tw/taiwanvn/TVN-201908002Third Party Advisory
- https://www.twcert.org.tw/subpages/ServeThePublic/public_document_details.aspx?lThird Party Advisory
FAQ
What is CVE-2019-15067?
CVE-2019-15067 is a vulnerability with a CVSS score of 9.8 (CRITICAL). An authentication bypass vulnerability discovered in Smart Battery A2-25DE, a multifunctional portable charger, firmware version ?<= SECFS-2013-10-16-13:42:58-629c30ee-60c68be6. An attacker can bypass...
How severe is CVE-2019-15067?
CVE-2019-15067 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2019-15067?
Check the references section above for vendor advisories and patch information. Affected products include: Gigastone Smart Battery A2-25De Firmware, Gigastone Smart Battery A2-25De.