cvedb.io
CVE-2021-33842
HIGH · CVSS 8.8
EPSS exploitation probability: 0%
Published 2021-06-09T12:15:07.957 · Last modified 2026-06-17T03:55:17.827

Summary

Improper Authentication vulnerability in the cookie parameter of Circutor SGE-PLC1000 firmware version 0.9.2b allows an attacker to perform operations as an authenticated user. In order to exploit this vulnerability, the attacker must be within the network where the device affected is located.

Affected products

circutor — sge-plc1000_firmware

Does this affect you?

Add your gear to cvedb and we'll alert you only when circutor ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.