CVE-2019-15069 - CVE House
Back to Database
Status published Critical CVE-2019-15069

An unsafe authentication interface was discovered in Smart Battery A4

Vulnerability Description

An unsafe authentication interface was discovered in Smart Battery A4, a multifunctional portable charger, firmware version ?<= r1.7.9 . An attacker can bypass authentication without modifying device file and gain web page management privilege.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-15069

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Leon Chen, Y.D. Chen, Laura Tzou, Mars Cheng

References

More from Gigastone

View All →
CVE-2019-15068
A broken access control vulnerability discovered in Smart Battery A4
Critical 9.8
CVE-2019-15067
An authentication bypass vulnerability discovered in Smart Battery A2-25DE
Critical 9.8

Affected Vendor

Affected Software

Smart Battery A4
Vulnerable Versions:
Firmware

Timeline

Official Publish: September 25th, 2019
Last Modified: September 17th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.