CVE-2019-15068

CVE-2019-15068: A broken access control vulnerability discovered in Smart Battery A4

Weakness CWE-284

Published September 25, 2019

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A broken access control vulnerability in Smart Battery A4, a multifunctional portable charger, firmware version ?<= r1.7.9 allows an attacker to get/reset administrator’s password without any authentication.

Key dates

02Disclosure timeline

September 25, 2019 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2019-15068 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/284.html

Related vulnerabilities

04Related CVE

CVE-2026-1964 WeKan REST Endpoint boards.js BoardTitleRESTBleed access control CVE-2026-21627 Extension - tassos.gr - SQL injection and Unauthenticated File Read in Novarain/Tassos Framework v4.10.14 – v6.0.37 for Joomla CVE-2022-4809 Improper Access Control in usememos/memos CVE-2025-11853 Sismics Teedy API Endpoint file access control CVE-2022-26313