CVE-2018-12634 — AI Deep Analysis Summary

🚨 **Essence**: A critical info leak in Circontrol CirCarLife Scada. 📉 **Consequences**: Attackers can grab sensitive internal data just by sending a direct HTTP request to specific URIs. No complex attack needed!

🛡️ **Root Cause**: Improper Access Control / Sensitive Information Exposure. 🐛 **Flaw**: The system fails to restrict access to diagnostic endpoints like `html/log` and `services/system/info.html`.…

🏢 **Vendor**: Circontrol (Spain). 🚗 **Product**: CirCarLife Scada (Parking/EV Charging automation). 📦 **Affected Version**: Specifically **v4.2.4**. (Likely earlier versions too, but 4.2.4 is confirmed).

💻 **Hackers' Power**: Remote attackers. 🔓 **Data Access**: Can retrieve sensitive system info and logs. 🕵️ **Impact**: Reconnaissance goldmine! They get a clear picture of your system architecture and internal states.

⚡ **Threshold**: VERY LOW. 🚪 **Auth**: None required! 🌐 **Config**: Just a direct URL request. If the URI is accessible, you're in. It's an open door for anyone on the network/internet.

🔥 **Public Exp?**: YES! 📜 **PoC**: Available via Nuclei templates (ProjectDiscovery). 💣 **Wild Exp**: Exploit-DB ID **45384** exists. It's easy to automate and scan for.

🔍 **Self-Check**: Scan for these exact paths: `/html/log` and `/services/system/info.html`. 🛠️ **Tool**: Use Nuclei or simple curl requests. If you get a response with system info/logs, you're vulnerable!

🩹 **Official Fix**: The description notes the issue exists **before v4.3**. ✅ **Status**: Upgrading to **v4.3 or later** is the official mitigation path mentioned in the PoC readme.

🚧 **No Patch?**: Block external access to these URIs via WAF or Firewall rules. 🚫 **Action**: Deny requests to `/html/log` and `/services/system/info.html` from untrusted networks immediately.

🚨 **Urgency**: HIGH. ⚠️ **Priority**: Patch ASAP! Since it requires no auth and public exploits exist, automated bots are likely scanning for this. Don't wait!