CVE-2019-15067: An authentication bypass vulnerability discovered in Smart Battery A2-25DE

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-09-25 · updated 2026-06-17

Description

An authentication bypass vulnerability discovered in Smart Battery A2-25DE, a multifunctional portable charger, firmware version ?<= SECFS-2013-10-16-13:42:58-629c30ee-60c68be6. An attacker can bypass authentication and gain privilege by modifying the login page.

Affected products

Gigastone Smart Battery A2-25De Firmware: through 2013-10-16

References

https://tvn.twcert.org.tw/taiwanvn/TVN-201908002
https://www.twcert.org.tw/subpages/ServeThePublic/public_document_details.aspx?lang=en-US&id=44
https://tvn.twcert.org.tw/taiwanvn/TVN-201908002
https://www.twcert.org.tw/subpages/ServeThePublic/public_document_details.aspx?lang=en-US&id=44

Get alerted when CVE-2019-15067 or the next vulnerability affects your stack