What’s Vulnerable › Vulnerabilities

CVE-2018-13342

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-10-24 · updated 2026-06-17
• Weakness: CWE-798

Description

The server API in the Anda app relies on hardcoded credentials.

Affected products

• Linhandante Anda: all versions

References

• https://gustavosilva.me/blog/2018/10/23/How-I-hacked-Anda-the-public-transportation-app-of-Porto-CVE-2018-13342.html
• https://gustavosilva.me/blog/2018/10/23/How-I-hacked-Anda-the-public-transportation-app-of-Porto-CVE-2018-13342.html

Get alerted when CVE-2018-13342 or the next vulnerability affects your stack