CVE-2021-33842 - CVE House
Back to Database
Status published High CVE-2021-33842

Circutor SGE-PLC1000 improper authentication

Vulnerability Description

Improper Authentication vulnerability in the cookie parameter of Circutor SGE-PLC1000 firmware version 0.9.2b allows an attacker to perform operations as an authenticated user. In order to exploit this vulnerability, the attacker must be within the network where the device affected is located.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-33842

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Industrial Cybersecurity team of S21sec, special mention to Aarón Flecha Menéndez.

References

More from Circutor

View All →
CVE-2025-64389
EXCHANGE OF SENSITIVE INFORMATION IN CLEAR TEXT
High 8.3
CVE-2025-64388
Denial of service through specific packets
Critical 9.2
CVE-2025-64387
CLICKJACKING
Medium 5.1
CVE-2025-64386
HIJACKING OF THE TOKEN AND GAINING ACCESS
High 7.7
CVE-2025-64385
INCORRECT SECURITY VALIDATION IN SENDING UDP FRAMES
Critical 9.2

Affected Vendor

Affected Software

SGE-PLC1000
Vulnerable Versions:
0.9.2b

Timeline

Official Publish: June 9th, 2021
Last Modified: September 16th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-565

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.