Approved changes feed: RSS · Atom

cpe:2.3:o:circutor:sge-plc1000_firmware:0.9.2b:*:*:*:*:*:*:*

part: o version: 0.9.2b update: *

VendorCircutor (ca159144-045f-5d8f-ae81-c71b6d00748f)
ProductSge Plc1000 Firmware (33ad5a2f-2f03-57e5-ade3-61da12a2cecf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-33842 vulnerable 2026-06-03 14:44:44.271842 Circutor SGE-PLC1000 improper authentication
HIGH (8.8)
Improper Authentication vulnerability in the cookie parameter of Circutor SGE-PLC1000 firmware version 0.9.2b allows an attacker to perform operations as an authenticated user. In order to exploit this vulnerability, the attacker must be within the network where the device affected is located.
Published: 2021-06-09T11:39:52.302Z
Updated: 2024-09-16T20:01:18.942Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33841 vulnerable 2026-06-03 14:44:44.270836 Circutor SGE-PLC1000 OS command Injection
CRITICAL (10)
SGE-PLC1000 device, in its 0.9.2b firmware version, does not handle some requests correctly, allowing a remote attacker to inject code into the operating system with maximum privileges.
Published: 2021-06-09T11:50:24.638Z
Updated: 2024-09-16T17:59:08.672Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.