Skip to content
OpenAdvisories

Product · Circutor

CIRCUTOR Q-SMT

4 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 10.0

    Insufficient Session Expiration vulnerability on CIRCUTOR Q-SMT

    An attacker with access to the network where CIRCUTOR Q-SMT is located in its firmware version 1.0.4, could steal the tokens used on the web, since these have no expiration date to access the web application without restrictions. Token theft can originate fro…

  • Critical 10.0

    Authentication bypass vulnerability on CIRCUTOR Q-SMT

    CIRCUTOR Q-SMT in its firmware version 1.0.4, could be affected by a denial of service (DoS) attack if an attacker with access to the web service bypasses the authentication mechanisms on the login page, allowing the attacker to use all the functionalities im…