CVE-2018-16669 | BDVDB-2026-107113 Detail

Description#

An issue was discovered in CIRCONTROL Open Charge Point Protocol (OCPP) before 1.5.0, as used in CirCarLife, PowerStudio, and other products. Due to storage of credentials in XML files, an unprivileged user can look at /services/config/config.xml for the admin credentials of the ocpp and circarlife panels.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.exploit-db.com/exploits/45384/
https://github.com/SadFud/Exploits/tree/master/Real%20World/Suites/cir-pwn-life

Exploit#

https://www.exploit-db.com/exploits/45384/

History#

Version 12018-09-18Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.