CVE-2021-33842
High
Description
Improper Authentication vulnerability in the cookie parameter of Circutor SGE-PLC1000 firmware version 0.9.2b allows an attacker to perform operations as an authenticated user. In order to exploit this vulnerability, the attacker must be within the network where the device affected is located.
SeverityHigh
CVSS8.8
Exploit probability—
ProductCircutor Sge-plc1000 Firmware
PublishedJun 9, 2021
First seenJun 9, 2021
Weakness typeCWE-565CWE-565
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| circutor sge-plc1000_firmware | 0.9.2b | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.