cve/2018/CVE-2018-12634.md

CVE-2018-12634

Description

CirCarLife Scada before 4.3 allows remote attackers to obtain sensitive information via a direct request for the html/log or services/system/info.html URI.

POC

Reference

• https://github.com/SadFud/Exploits/tree/master/Real%20World/Suites/cir-pwn-life
• https://github.com/SadFud/Exploits/tree/master/Real%20World/Suites/cir-pwn-life
• https://www.exploit-db.com/exploits/45384/
• https://www.exploit-db.com/exploits/45384/

Github

• https://github.com/20142995/sectool
• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/SadFud/Exploits
• https://github.com/d4n-sec/d4n-sec.github.io