CVE-2018-17918

Circontrol CirCarLife all versions prior to 4.3.1, authentication to the device can be bypassed by entering the URL of a specific page.

• CWE-288
• CWE-287

• http://www.securityfocus.com/bid/105816Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-18-305-03Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/105816Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-18-305-03Third Party Advisory, US Government Resource

Published

Nov 2, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-17912An XXE vulnerability exists in CASE Suite Versions 3.10 and …
• CVE-2018-17913A type confusion vulnerability exists when processing projec…
• CVE-2018-17914InduSoft Web Studio versions prior to 8.1 SP2, and InTouch E…9.8
• CVE-2018-17915All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye …
• CVE-2018-17916InduSoft Web Studio versions prior to 8.1 SP2, and InTouch E…9.8
• CVE-2018-17917All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye …
• CVE-2018-17919All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye …
• CVE-2018-1792IBM WebSphere MQ 8.0.0.0 through 8.0.0.10, 9.0.0.0 through 9…8.8
• CVE-2018-17921SAGA1-L8B with any firmware versions prior to A0.10 are vuln…8.8
• CVE-2018-17922Circontrol CirCarLife all versions prior to 4.3.1, the PAP c…
• CVE-2018-17923SAGA1-L8B with any firmware versions prior to A0.10 are vuln…
• CVE-2018-17924Rockwell Automation MicroLogix 1400 Controllers and 1756 Con…8.6