CVE-2018-16669

An issue was discovered in CIRCONTROL Open Charge Point Protocol (OCPP) before 1.5.0, as used in CirCarLife, PowerStudio, and other products. Due to storage of credentials in XML files, an unprivileged user can look at /services/config/config.xml for the admin credentials of the ocpp and circarlife panels.

• CWE-522

• https://github.com/SadFud/Exploits/tree/master/Real%20World/Suites/cir-pwn-lifeExploit
• https://www.exploit-db.com/exploits/45384/Exploit, Third Party Advisory, VDB Entry
• https://github.com/SadFud/Exploits/tree/master/Real%20World/Suites/cir-pwn-lifeExploit
• https://www.exploit-db.com/exploits/45384/Exploit, Third Party Advisory, VDB Entry

Published

Sep 18, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-16663An issue was discovered in Contiki-NG through 4.1. There is …
• CVE-2018-16664An issue was discovered in Contiki-NG through 4.1. There is …
• CVE-2018-16665An issue was discovered in Contiki-NG through 4.1. There is …
• CVE-2018-16666An issue was discovered in Contiki-NG through 4.1. There is …
• CVE-2018-16667An issue was discovered in Contiki-NG through 4.1. There is …
• CVE-2018-16668An issue was discovered in CIRCONTROL CirCarLife before 4.3.…5.3
• CVE-2018-1667IBM DataPower Gateway 7.6.0.0 through 7.6.0.10, 7.5.2.0 thro…5.4
• CVE-2018-16670An issue was discovered in CIRCONTROL CirCarLife before 4.3.…
• CVE-2018-16671An issue was discovered in CIRCONTROL CirCarLife before 4.3.…
• CVE-2018-16672An issue was discovered in CIRCONTROL CirCarLife before 4.3.…6.5
• CVE-2018-1668IBM DataPower Gateway 7.5.0.0 through 7.5.0.19, 7.5.1.0 thro…5.3
• CVE-2018-1669IBM DataPower Gateway 7.1.0.0 - 7.1.0.23, 7.2.0.0 - 7.2.0.21…7.1