CVE-2018-12634

published 2018-06-22

CVE-2018-12634: CirCarLife Scada before 4.3 allows remote attackers to obtain sensitive information via a direct request for the html/log or services/system/info.html URI.

Priority P2 69 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

EXPLOIT

CirCarLife Scada before 4.3 allows remote attackers to obtain sensitive information via a direct request for the html/log or services/system/info.html URI.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
circontrol	circarlife_scada	< 4.3	4.3

Detection & IOCs extracted from sources · hover to see the quote

url /html/log↗

url /services/system/info.html↗

• → HTTP GET request to /html/log returning HTTP 200 with response header containing 'CirCarLife Scada' and body containing 'user.debug', 'user.info', and 'EVSE' indicates successful exploitation of the unauthenticated log exposure.
• → Response header value 'CirCarLife Scada' can be used to fingerprint vulnerable CirCarLife SCADA devices exposed on the internet.
• → Log response body keywords 'user.debug', 'user.info', and 'EVSE' (all present together) confirm sensitive system log disclosure from the charging station.

• · The vulnerability affects CirCarLife Scada versions before 4.3 only; version 4.3 and above are not affected.
• · No authentication is required to exploit this vulnerability — the sensitive URIs are directly accessible to unauthenticated remote attackers.

CVSS provenance

nvd v3.1 9.8 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 5.0 MEDIUM AV:N/AC:L/Au:N/C:P/I:N/A:N

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-200