What is CVE-2021-33842?

CVE-2021-33842 is a high-severity vulnerability in Circutor Sge-Plc1000, classified under Reliance on Cookies without Validation and Integrity Checking. CVSS score: 8.8/10. Published 2021-06-09.

How severe is CVE-2021-33842?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Circutor Sge-Plc1000

CVE-2021-33842

Improper Authentication vulnerability in the cookie parameter of Circutor SGE-PLC1000 firmware version 0.9.2b allows an attacker to perform operations as an authenticated user. In order to exploit this vulnerability, the attacker must be within the network where the device affected is located.

EPSS: 0.004 (35.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Circutor Sge-plc1000 — versions 0.9.2b
Circutor Sge-plc1000_firmware — versions 0.9.2b

Weakness classification (CWE)

CWE-565 — Reliance on Cookies without Validation and Integrity Checking

References

cve-coordination@incibe.es (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2021-33842?: CVE-2021-33842 is a high-severity vulnerability in Circutor Sge-Plc1000, classified under Reliance on Cookies without Validation and Integrity Checking. CVSS score: 8.8/10. Published 2021-06-09.
How severe is CVE-2021-33842?: High severity. CVSS v3 base score is 8.8 out of 10.