title: A broken access control vulnerability discovered in Smart Battery A4
description: A broken access control vulnerability in Smart Battery A4, a multifunctional portable charger, firmware version ?<= r1.7.9 allows an attacker to get/reset administrator’s password without any authentication.
problem types: CWE-284 Improper Access Control
affected:
{
product: Smart Battery A4
vendor: Gigastone
versions:
lessThanOrEqual: r1.7.9, status: unknown, version: Firmware, versionType: custom
}