GCVE - cpe:2.3:a:circontrol:circarlife_scada:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:circontrol:circarlife_scada:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Circontrol (`c7756045-d30b-5c18-be44-fea336b98a33`)
Product	Circarlife Scada (`3997cd2c-1b5c-5e0f-982f-294c5f6db363`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-16672`	vulnerable	2026-06-08 05:11:05.331322	Details available An issue was discovered in CIRCONTROL CirCarLife before 4.3. Due to the storage of multiple sensitive information elements in a JSON format at /services/system/setup.json, an authenticated but unprivileged user can exfiltrate critical setup information. Published: 2018-09-26T17:00:00.000Z Updated: 2024-08-05T10:32:53.194Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/45384/ https://github.com/SadFud/Exploits/tree/master/Real%20World/Suites/cir-pwn-life	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-16671`	vulnerable	2026-06-08 05:11:05.330903	Details available An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is system software information disclosure due to lack of authentication for /html/device-id. Published: 2018-09-18T20:00:00.000Z Updated: 2024-08-05T10:32:53.644Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/45384/ https://github.com/SadFud/Exploits/tree/master/Real%20World/Suites/cir-pwn-life	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-16670`	vulnerable	2026-06-08 05:11:05.330482	Details available An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is PLC status disclosure due to lack of authentication for /html/devstat.html. Published: 2018-09-18T20:00:00.000Z Updated: 2024-08-05T10:32:53.863Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/45384/ https://github.com/SadFud/Exploits/tree/master/Real%20World/Suites/cir-pwn-life	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-16668`	vulnerable	2026-06-08 05:11:05.328440	Details available An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is internal installation path disclosure due to the lack of authentication for /html/repository. Published: 2018-09-18T20:00:00.000Z Updated: 2024-08-05T10:32:52.965Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/45384/ https://github.com/SadFud/Exploits/tree/master/Real%20World/Suites/cir-pwn-life	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-12634`	vulnerable	2026-06-08 05:10:41.841704	Details available CirCarLife Scada before 4.3 allows remote attackers to obtain sensitive information via a direct request for the html/log or services/system/info.html URI. Published: 2018-06-22T00:00:00.000Z Updated: 2024-08-05T08:38:06.396Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/45384/ https://www.seebug.org/vuldb/ssvid-97353 https://github.com/SadFud/Exploits/tree/master/Real%20World/Suites/cir-pwn-life	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.