CVE-2019-15067: Gigastone Smart Battery a2-25de Firmware

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

An authentication bypass vulnerability discovered in Smart Battery A2-25DE, a multifunctional portable charger, firmware version ?<= SECFS-2013-10-16-13:42:58-629c30ee-60c68be6. An attacker can bypass authentication and gain privilege by modifying the login page.

Affected products

• Gigastone Smart Battery a2-25de Firmware: up to and including 2013-10-16

Published 2019-09-25. Last modified 2026-06-17.