Authentication Bypass Vulnerability in Smart Battery A2-25DE Firmware <= SECFS-2013-10-16-13:42:58-629c30ee-60c68be6

CVE-2019-15067 · CRITICAL Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

An authentication bypass vulnerability discovered in Smart Battery A2-25DE, a multifunctional portable charger, firmware version ?<= SECFS-2013-10-16-13:42:58-629c30ee-60c68be6. An attacker can bypass authentication and gain privilege by modifying the login page.

Learn more about our Web Application Penetration Testing UK.