Description (CNA)
A broken access control vulnerability in Smart Battery A4, a multifunctional portable charger, firmware version ?<= r1.7.9 allows an attacker to get/reset administrator’s password without any authentication.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Gigastone / Smart Battery A4 | unknown Firmware through r1.7.9 |
CWE
CWE-284
References
- https://tvn.twcert.org.tw/taiwanvn/TVN-201908003
- https://www.twcert.org.tw/subpages/ServeThePublic/public_document_details.aspx?lang=en-US&id=45
ADP enrichment
No English description supplied.