CVE-2012-5862 Sinapsi eSolar Hard-Coded Password
HighCVSS 10.0
EPSS 12.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
These Sinapsi devices
store hard-coded passwords in the PHP file of the device. By using the
hard-coded passwords in the device, attackers can log into the device
with administrative privileges. This could allow the attacker to have
unauthorized access.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sinapsitech sinapsi firmware | <= 2.0.2870 | No fix listed |
| sinapsitech esolar duo photovoltaic system monitor | All versions | No fix listed |
| sinapsitech esolar light photovoltaic system monitor | All versions | No fix listed |
| sinapsitech esolar photovoltaic system monitor | All versions | No fix listed |
| sinapsi eSolar | < 2.0.2870_xxx_2.2.12 | 2.0.2870_xxx_2.2.12 |
| sinapsi eSolar DUO | < 2.0.2870_xxx_2.2.12 | 2.0.2870_xxx_2.2.12 |
| sinapsi eSolar Light | < 2.0.2870_xxx_2.2.12 | 2.0.2870_xxx_2.2.12 |
References
- 20120911 Multiple vulnerabilities in Ezylog photovoltaic management server exploit mailing-list
- 21273 exploit
- www.sinapsitech.it
- sinapsi-default-password(80200) vdb-entry
- www.cisa.gov
- www.us-cert.gov us-government-resource