CVE-2018-12634

50Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 57%

from disclosure to weapon82 days

Published on NVDJun 22

1st PoC+82d

exploitation probability

57%top 1% of all CVEs

observed exploitation

nono source reports it

2 public exploit(s)

CirCarLife Scada before 4.3 allows remote attackers to obtain sensitive information via a direct request for the html/log or services/system/info.html URI.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/45384unverified cve_referencewww.exploit-db.com/exploits/45384/unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

https://github.com/SadFud/Exploits/tree/master/Real%20World/Suites/cir-pwn-life https://www.exploit-db.com/exploits/45384/https://www.seebug.org/vuldb/ssvid-97353