CVE-2019-15067 - CVE House
Back to Database
Status published Critical CVE-2019-15067

An authentication bypass vulnerability discovered in Smart Battery A2-25DE

Vulnerability Description

An authentication bypass vulnerability discovered in Smart Battery A2-25DE, a multifunctional portable charger, firmware version ?<= SECFS-2013-10-16-13:42:58-629c30ee-60c68be6. An attacker can bypass authentication and gain privilege by modifying the login page.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-15067

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Leon Chen, Y.D. Chen, Laura Tzou, Mars Cheng, Julian Chen

References

More from Gigastone

View All →
CVE-2019-15069
An unsafe authentication interface was discovered in Smart Battery A4
Critical 9.8
CVE-2019-15068
A broken access control vulnerability discovered in Smart Battery A4
Critical 9.8

Affected Vendor

Affected Software

Smart Battery A2-25DE
Vulnerable Versions:
Firmware

Timeline

Official Publish: September 25th, 2019
Last Modified: September 16th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.