Medium · 5.3 CVE-2019-5616 EUVD-2019-15191GHSA-q93g-7855-pfx5

CircuitWerkes Sicon-8 Client-Side Authentication Read-Only Bypass

Published Mar 15, 2019 · Updated Sep 16, 2024 · Assigned by rapid7

Description

CircuitWerkes Sicon-8, a hardware device used for managing electrical devices, ships with a web-based front-end controller and implements an authentication mechanism in JavaScript that is run in the context of a user's web browser.

References

https://blog.rapid7.com/2019/03/12/r7-2019-01-circuitwerkes-sicon-8-client-side-authentication-read-only-bypass-cve-2019-5616/