CVE-2019-15068 A broken access control vulnerability discovered in Smart Battery A4

2019-09-2518:10:15

CWE-284

twcert

www.cve.org

AI Score

9.5

Confidence

High

EPSS

0.002

Percentile

61.8%

JSON

A broken access control vulnerability in Smart Battery A4, a multifunctional portable charger, firmware version ?<= r1.7.9 allows an attacker to get/reset administrator’s password without any authentication.

CNA Affected

[
  {
    "product": "Smart Battery A4",
    "vendor": "Gigastone",
    "versions": [
      {
        "lessThanOrEqual": "r1.7.9",
        "status": "unknown",
        "version": "Firmware",
        "versionType": "custom"
      }
    ]
  }
]