CVE-2021-33842

8.8 highEPSS 0.4%

High (8.8) in circutor sge-plc1000 firmware. EPSS 0.4% chance of exploitation in the next 30 days.

Improper Authentication vulnerability in the cookie parameter of Circutor SGE-PLC1000 firmware version 0.9.2b allows an attacker to perform operations as an authenticated user. In order to exploit this vulnerability, the attacker must be within the network where the device affected is located.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 37% of CVEs (scores of 2026-10-31)
CWE: CWE-565
Published: 2021-06-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

circutor:sge-plc1000_firmware

References

https://www.incibe.es/en/incibe-cert/notices/aviso-sci/circutor-sge-plc1000-improper-authentication
https://www.incibe.es/en/incibe-cert/notices/aviso-sci/circutor-sge-plc1000-improper-authentication

Check your stack JSON