id: circarlife-installer info: name: CirCarLife - Installer author: geeknik severity: critical description: A CirCarLife admin panel was accessed. CirCarLife is an internet-connected electric vehicle charging station reference: - https://circontrol.com/ classification: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H cvss-score: 9.4 cwe-id: CWE-284 tags: scada,circontrol,circarlife,setup,exposure,panel,installer requests: - method: GET path: - "{{BaseURL}}/html/setup.html" matchers-condition: and matchers: - type: word part: header words: - "CirCarLife Scada" - type: word words: - "- setup" - "Network setup" - "Modem setup" - "Security setup" condition: and - type: status status: - 200 # Enhanced by mp on 2022/05/23