Vulnerability Description
A broken access control vulnerability in Smart Battery A4, a multifunctional portable charger, firmware version ?<= r1.7.9 allows an attacker to get/reset administrator’s password without any authentication.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Gigastone | Smart Battery A4 Firmware | <= r1.7.9 |
| Gigastone | Smart Battery A4 | - |
Related Weaknesses (CWE)
References
- https://tvn.twcert.org.tw/taiwanvn/TVN-201908003Third Party Advisory
- https://www.twcert.org.tw/subpages/ServeThePublic/public_document_details.aspx?lThird Party Advisory
- https://tvn.twcert.org.tw/taiwanvn/TVN-201908003Third Party Advisory
- https://www.twcert.org.tw/subpages/ServeThePublic/public_document_details.aspx?lThird Party Advisory
FAQ
What is CVE-2019-15068?
CVE-2019-15068 is a vulnerability with a CVSS score of 9.8 (CRITICAL). A broken access control vulnerability in Smart Battery A4, a multifunctional portable charger, firmware version ?<= r1.7.9 allows an attacker to get/reset administrator’s password without any authenti...
How severe is CVE-2019-15068?
CVE-2019-15068 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2019-15068?
Check the references section above for vendor advisories and patch information. Affected products include: Gigastone Smart Battery A4 Firmware, Gigastone Smart Battery A4.