CVE-2012-5864 Sinapsi eSolar Improper Authentication
HighCVSS 10.0
EPSS 4.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
These Sinapsi devices
do not check if users that visit pages within the device have properly
authenticated. By directly visiting the pages within the device,
attackers can gain unauthorized access with administrative privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sinapsitech sinapsi firmware | <= 2.0.2870 | No fix listed |
| sinapsitech esolar duo photovoltaic system monitor | All versions | No fix listed |
| sinapsitech esolar light photovoltaic system monitor | All versions | No fix listed |
| sinapsitech esolar photovoltaic system monitor | All versions | No fix listed |
| sinapsi eSolar | < 2.0.2870_xxx_2.2.12 | 2.0.2870_xxx_2.2.12 |
| sinapsi eSolar DUO | < 2.0.2870_xxx_2.2.12 | 2.0.2870_xxx_2.2.12 |
| sinapsi eSolar Light | < 2.0.2870_xxx_2.2.12 | 2.0.2870_xxx_2.2.12 |
References
- 20120911 Multiple vulnerabilities in Ezylog photovoltaic management server exploit mailing-list
- 21273 exploit
- www.sinapsitech.it
- sinapsi-default-password(80200) vdb-entry
- www.cisa.gov
- www.us-cert.gov us-government-resource
- sinapsi-sec-bypass(80203) vdb-entry