From f51d617db8589bb4f2f6023dd739fc89c87122ed Mon Sep 17 00:00:00 2001 From: xiaoheihei1107 <62200676+xiaoheihei1107@users.noreply.github.com> Date: Thu, 16 Sep 2021 18:02:30 +0800 Subject: [PATCH] Add CVE-2018-12634 --- CirCarLife/CVE-2018-12634/README.md | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 CirCarLife/CVE-2018-12634/README.md diff --git a/CirCarLife/CVE-2018-12634/README.md b/CirCarLife/CVE-2018-12634/README.md new file mode 100644 index 0000000..b9dedab --- /dev/null +++ b/CirCarLife/CVE-2018-12634/README.md @@ -0,0 +1,10 @@ +# CirCarLife SCADA 4.3 Credential Disclosure + +Circontrol is a Spanish manufacturer that insists on developing innovative technologies to provide competitive and comprehensive products and solutions for eMobility and efficiency of parking lots. CirCarLife Scada all versions under 4.3.0 OCPP implementation all versions under 1.5.0 has an information disclosure vulnerability, leaking information such as logs and configuration. + +FOFA **query rule**: [banner="CirCarLife Scada"](https://fofa.so/result?qbase64=YmFubmVyPSJDaXJDYXJMaWZlIFNjYWRhIg%3D%3D) + +# Demo + +![CirCarLife_SCADA_4_3_Credential_Disclosure](CirCarLife_SCADA_4_3_Credential_Disclosure.gif) +