CVE-2018-12635: Circontrol Scada

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

CirCarLife Scada v4.2.4 allows unauthorized upgrades via requests to the html/upgrade.html and services/system/firmware.upgrade URIs.

Affected products

• Circontrol Scada: version 4.2.4 only

Published 2018-06-22. Last modified 2026-06-17.