From 88636709172f5d7bed20427cbf10cffeb96e55b7 Mon Sep 17 00:00:00 2001 From: MostInterestingBotInTheWorld <98333686+MostInterestingBotInTheWorld@users.noreply.github.com> Date: Thu, 12 May 2022 14:49:34 -0400 Subject: [PATCH] Enhancement: cves/2018/CVE-2018-12634.yaml by mp --- cves/2018/CVE-2018-12634.yaml | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/cves/2018/CVE-2018-12634.yaml b/cves/2018/CVE-2018-12634.yaml index c70ccfedb9..d37895f7a8 100644 --- a/cves/2018/CVE-2018-12634.yaml +++ b/cves/2018/CVE-2018-12634.yaml @@ -1,12 +1,13 @@ id: CVE-2018-12634 info: - name: Exposed CirCarLife System Log + name: CirCarLife <4.3 - System Log Exposure author: geeknik severity: critical - description: CirCarLife is an internet-connected electric vehicle charging station + description: CirCarLife Scada before 4.3 allows remote attackers to obtain sensitive information via a direct request for the html/log or services/system/info.html URI. CirCarLife is an internet-connected electric vehicle charging station. reference: - https://circontrol.com/ + - https://nvd.nist.gov/vuln/detail/CVE-2018-12634 classification: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H cvss-score: 9.8 @@ -33,3 +34,5 @@ requests: - type: status status: - 200 + +# Enhanced by mp on 2022/05/12