Circontrol Circarlife Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Circontrol Circarlife Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2018-17918 — CVSS 9.8 (critical): Circontrol CirCarLife all versions prior to 4.3.1, authentication to the device can be bypassed by entering the URL of a specific page.
• CVE-2018-17922 — CVSS 9.8 (critical): Circontrol CirCarLife all versions prior to 4.3.1, the PAP credentials of the device are stored in clear text in a log file that is…