Vendor
CIRCUTOR
27 known vulnerabilities in products by CIRCUTOR, 0 of them actively exploited (CISA KEV).
Key figures
27
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
17
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2021-26777 | Circutor Compact Dc-s Basic Firmware: Buffer Overflow | 9.8 | |
| Critical | CVE-2021-33841 | Circutor SGE-PLC1000 OS command Injection | 10.0 | |
| Critical | CVE-2025-11779 | Stack-based buffer overflow vulnreability in Circutor SGE-PLC1000/SGE-PLC50 | 9.8 | |
| High | CVE-2025-11787 | Command injection vulnerability in Circutor SGE-PLC1000/SGE-PLC50 | 8.8 | |
| Critical | CVE-2025-11783 | Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 | 9.8 | |
| Critical | CVE-2024-8887 | Authentication bypass vulnerability on CIRCUTOR Q-SMT | 10.0 | |
| Critical | CVE-2025-11786 | Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 | 9.8 | |
| Critical | CVE-2025-11785 | Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 | 9.8 | |
| Critical | CVE-2025-11784 | Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 | 9.8 | |
| Critical | CVE-2025-11782 | Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 | 9.8 | |
| Critical | CVE-2025-11778 | Stack-based buffer overflow vulnreability in Circutor SGE-PLC1000/SGE-PLC50 | 9.8 | |
| Critical | CVE-2025-11788 | Heap-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 | 9.8 | |
| Critical | CVE-2025-11780 | Stack-based buffer overflow vulnreability in Circutor SGE-PLC1000/SGE-PLC50 | 9.8 | |
| Critical | CVE-2025-64385 | INCORRECT SECURITY VALIDATION IN SENDING UDP FRAMES | — | |
| Critical | CVE-2024-8888 | Insufficient Session Expiration vulnerability on CIRCUTOR Q-SMT | 10.0 | |
| Critical | CVE-2025-64388 | Denial of service through specific packets | — | |
| Critical | CVE-2024-8889 | Improper Input Validation vulnerability on CIRCUTOR TCP2RS+ | 9.3 | |
| High | CVE-2022-1669 | Circutor COMPACT DC-S BASIC | 6.8 | |
| High | CVE-2025-64386 | HIJACKING OF THE TOKEN AND GAINING ACCESS | — | |
| High | CVE-2024-8890 | Insertion of Sensitive Information Into Sent Data vulnerability on CIRCUTOR Q-SMT | 8.0 | |
| High | CVE-2021-33842 | Circutor SGE-PLC1000 improper authentication | 8.8 | |
| High | CVE-2025-11781 | Use of hardcoded cryptographic keys in Circutor SGE-PLC1000/SGE-PLC50 | 7.8 | |
| High | CVE-2025-64389 | EXCHANGE OF SENSITIVE INFORMATION IN CLEAR TEXT | — | |
| High | CVE-2025-11789 | Out-of-bounds read vulnerability in Circutor SGE-PLC1000/SGE-PLC50 | 7.5 | |
| Medium | CVE-2025-64387 | CLICKJACKING | — |
Products
| Sge-plc1000 Firmware | 14 | 0 |
| Sge-plc50 Firmware | 12 | 0 |
| Circutor TCPRS1plus | 5 | 0 |
| Circutor Q-smt | 4 | 0 |
| Q-smt Firmware | 4 | 0 |