Circutor Q Smt
Approved changes feed: RSS · Atom
cpe:2.3:a:circutor:circutor_q_smt:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Circutor (ca159144-045f-5d8f-ae81-c71b6d00748f) |
|---|---|
| Product | Circutor Q Smt (9bcb6a3a-f3dc-59b5-af7e-77e9335b5d6e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-8891 |
vulnerable | 2026-06-03 14:58:19.742717 |
Exposure of Private Personal Information to an Unauthorized Actor vulnerability on CIRCUTOR Q-SMT
MEDIUM (5.3)
An attacker with no knowledge of the current users in the web application, could build a dictionary of potential users and check the server responses as it indicates whether or not the user is present in CIRCUTOR Q-SMT in its firmware version 1.0.4.
Published: 2024-09-18T13:10:01.274Z
Updated: 2024-09-18T15:28:30.964Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8888 |
vulnerable | 2026-06-03 14:58:19.736160 |
Insufficient Session Expiration vulnerability on CIRCUTOR Q-SMT
CRITICAL (10)
An attacker with access to the network where CIRCUTOR Q-SMT is located in its firmware version 1.0.4, could steal the tokens used on the web, since these have no expiration date to access the web application without restrictions. Token theft can originate from different methods such as network captures, locally stored web information, etc.
Published: 2024-09-18T11:54:47.337Z
Updated: 2024-09-18T13:14:00.252Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8887 |
vulnerable | 2026-06-03 14:58:19.730491 |
Authentication bypass vulnerability on CIRCUTOR Q-SMT
CRITICAL (10)
CIRCUTOR Q-SMT in its firmware version 1.0.4, could be affected by a denial of service (DoS) attack if an attacker with access to the web service bypasses the authentication mechanisms on the login page, allowing the attacker to use all the functionalities implemented at web level that allow interacting with the device.
Published: 2024-09-18T11:05:31.015Z
Updated: 2024-09-18T13:26:55.753Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.