Sign-up

ID

VAR-201909-0869


CVE

CVE-2019-15068


TITLE

Smart Battery A4 Authentication vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2019-009696

DESCRIPTION

A broken access control vulnerability in Smart Battery A4, a multifunctional portable charger, firmware version ?<= r1.7.9 allows an attacker to get/reset administrator’s password without any authentication. Smart Battery A4 Contains an authentication vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. Smart Battery A4 is a portable power supply device. An attacker could exploit this vulnerability to obtain/reset the administrator password without authentication

Trust: 1.71

sources: NVD: CVE-2019-15068 // JVNDB: JVNDB-2019-009696 // VULHUB: VHN-147077

AFFECTED PRODUCTS

vendor:gigastonemodel:smart battery a4scope:lteversion:r1.7.9

Trust: 1.0

vendor:gigastonemodel:smart battery a4scope: - version: -

Trust: 0.8

sources: JVNDB: JVNDB-2019-009696 // NVD: CVE-2019-15068

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2019-15068
value: CRITICAL

Trust: 1.0

NVD: CVE-2019-15068
value: CRITICAL

Trust: 0.8

CNNVD: CNNVD-201909-1179
value: CRITICAL

Trust: 0.6

VULHUB: VHN-147077
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2019-15068
severity: HIGH
baseScore: 10.0
vectorString: AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-147077
severity: HIGH
baseScore: 10.0
vectorString: AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2019-15068
baseSeverity: CRITICAL
baseScore: 9.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 3.9
impactScore: 5.9
version: 3.1

Trust: 1.0

NVD: CVE-2019-15068
baseSeverity: CRITICAL
baseScore: 9.8
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: VULHUB: VHN-147077 // JVNDB: JVNDB-2019-009696 // CNNVD: CNNVD-201909-1179 // NVD: CVE-2019-15068

PROBLEMTYPE DATA

problemtype:CWE-306

Trust: 1.1

problemtype:CWE-284

Trust: 1.0

problemtype:CWE-287

Trust: 0.9

sources: VULHUB: VHN-147077 // JVNDB: JVNDB-2019-009696 // NVD: CVE-2019-15068

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201909-1179

TYPE

access control error

Trust: 0.6

sources: CNNVD: CNNVD-201909-1179

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2019-009696

PATCH
title:Smart Battery A4url:https://www.gigastone.com/EN/product/c/2/n/15
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2019-009696

EXTERNAL IDS
db:NVDid:CVE-2019-15068
Trust: 2.5
db:TWCERTid:TVN-201908003
Trust: 1.7
db:JVNDBid:JVNDB-2019-009696
Trust: 0.8
db:CNNVDid:CNNVD-201909-1179
Trust: 0.7
db:VULHUBid:VHN-147077
Trust: 0.1
sources:
            
            
            VULHUB: VHN-147077 // 
            
            
            
            JVNDB: JVNDB-2019-009696 // 
            
            
            
            CNNVD: CNNVD-201909-1179 // 
            
            
            
            NVD: CVE-2019-15068

REFERENCES
url:https://www.twcert.org.tw/subpages/servethepublic/public_document_details.aspx?lang=en-us&id=45
Trust: 2.4
url:https://tvn.twcert.org.tw/taiwanvn/tvn-201908003
Trust: 1.7
url:https://nvd.nist.gov/vuln/detail/cve-2019-15068
Trust: 1.4
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-15068
Trust: 0.8
url:https://www.twcert.org.tw/subpages/servethepublic/public_document_details.aspx?lang=en-us&amp;id=45
Trust: 0.1
sources:
            
            
            VULHUB: VHN-147077 // 
            
            
            
            JVNDB: JVNDB-2019-009696 // 
            
            
            
            CNNVD: CNNVD-201909-1179 // 
            
            
            
            NVD: CVE-2019-15068

SOURCES
db:VULHUBid:VHN-147077
db:JVNDBid:JVNDB-2019-009696
db:CNNVDid:CNNVD-201909-1179
db:NVDid:CVE-2019-15068

LAST UPDATE DATE
2024-11-23T22:33:45.589000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-147077date:2020-10-16T00:00:00
db:JVNDBid:JVNDB-2019-009696date:2019-09-27T00:00:00
db:CNNVDid:CNNVD-201909-1179date:2020-10-21T00:00:00
db:NVDid:CVE-2019-15068date:2024-11-21T04:27:59.363

SOURCES RELEASE DATE
db:VULHUBid:VHN-147077date:2019-09-25T00:00:00
db:JVNDBid:JVNDB-2019-009696date:2019-09-27T00:00:00
db:CNNVDid:CNNVD-201909-1179date:2019-09-25T00:00:00
db:NVDid:CVE-2019-15068date:2019-09-25T19:15:10.563