vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2019-15067

An authentication bypass vulnerability discovered in Smart Battery A2-25DE

CRITICAL
9.8
CVSS Score
Published: September 25, 2019 at 06:10 PM UTC
Updated: June 17, 2026 at 02:19 AM UTC
2 products affected across 1 vendorSmart Battery A2-25de FirmwareSmart Battery A2-25De

Using Smart Battery A2-25DE by Gigastone?

Get instant alerts when new vulnerabilities affect Smart Battery A2-25DE - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
CRITICAL9.8
Exploit prediction
EPSS 2%

Description

An authentication bypass vulnerability discovered in Smart Battery A2-25DE, a multifunctional portable charger, firmware version ?<= SECFS-2013-10-16-13:42:58-629c30ee-60c68be6. An attacker can bypass authentication and gain privilege by modifying the login page.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Smart Battery A2-25de Firmware· Gigastone
95%
v ≤ 2013-10-16
Vendor states this is fixed in Firmware (unknown)
gigastone-smart-battery-a2-25de (same device)
Smart Battery A2-25De· Gigastonedevice
80%
All versions

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (2)

x_refsource_CONFIRMThird Party Advisory
Source: [email protected]
https://tvn.twcert.org.tw/taiwanvn/TVN-201908002
x_refsource_CONFIRMThird Party Advisory
Source: [email protected]
https://www.twcert.org.tw/subpages/ServeThePublic/public_document_details.aspx?lang=en-US&id=44

CVSS

9.8CRITICAL[email protected]
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card