{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2018-16670/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2018-16670/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2018-16670/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2018-16670/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2018-16670/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2018-16670"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2018-16670"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2018/CVE-2018-16670.yaml",
    "nuclei_template_severity": "medium",
    "nuclei_template_yaml": "id: CVE-2018-16670\n\ninfo:\n  name: CirCarLife <4.3 - Improper Authentication\n  author: geeknik\n  severity: medium\n  description: CirCarLife before 4.3 is susceptible to improper authentication. A PLC status disclosure exists due to lack of authentication for /html/devstat.html. An attacker can obtain sensitive information, modify data, and/or execute unauthorized operations.\n  impact: |\n    Unauthenticated attackers can obtain sensitive PLC status information without authentication due to improper access controls, potentially revealing critical industrial control system details.\n  remediation: |\n    Upgrade CirCarLife to version 4.3 or higher to fix the improper authentication issue.\n  reference:\n    - https://www.exploit-db.com/exploits/45384\n    - https://github.com/SadFud/Exploits/tree/master/Real%20World/Suites/cir-pwn-life\n    - https://www.exploit-db.com/exploits/45384/\n    - https://nvd.nist.gov/vuln/detail/CVE-2018-16670\n    - https://github.com/20142995/sectool\n  classification:\n    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N\n    cvss-score: 5.3\n    cve-id: CVE-2018-16670\n    cwe-id: CWE-287\n    epss-score: 0.24568\n    epss-percentile: 0.97887\n    cpe: cpe:2.3:a:circontrol:circarlife_scada:*:*:*:*:*:*:*:*\n  metadata:\n    max-request: 1\n    vendor: circontrol\n    product: circarlife_scada\n  tags: cve,cve2018,scada,plc,iot,disclosure,edb,circarlife,circontrol,vkev,vuln\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/services/user/values.xml?var=STATUS\"\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: header\n        words:\n          - \"CirCarLife Scada\"\n\n      - type: word\n        part: body\n        words:\n          - \"<values><variable><id>\"\n          - \"Reader.STATUS\"\n        condition: and\n# digest: 4a0a00473045022100d9cbee2bb58e188a1528a37aef64757a49c4d03848c671f37bfe6a4801d1737b0220417c85cd57561d2f6489d04500569905c5b1fb6dafb6301a6143385160964487:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2018-16670"
}