Vulnerability Details CVE-2012-5862
These Sinapsi devices
store hard-coded passwords in the PHP file of the device. By using the
hard-coded passwords in the device, attackers can log into the device
with administrative privileges. This could allow the attacker to have
unauthorized access.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.195
EPSS Ranking 95.2%
CVSS Severity
CVSS v2 Score 10.0
References
- http://archives.neohapsis.com/archives/bugtraq/2012-09/0045.html
- http://www.exploit-db.com/exploits/21273/
- http://www.sinapsitech.it/default.asp?active_page_id=78&news_id=88
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80200
- https://www.cisa.gov/news-events/ics-advisories/icsa-12-325-01
- http://archives.neohapsis.com/archives/bugtraq/2012-09/0045.html
- http://www.exploit-db.com/exploits/21273/
- http://www.sinapsitech.it/default.asp?active_page_id=78&news_id=88
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-325-01.pdf
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80200
Products affected by CVE-2012-5862
-
cpe:2.3:h:sinapsitech:esolar_duo_photovoltaic_system_monitor:-
-
cpe:2.3:h:sinapsitech:esolar_light_photovoltaic_system_monitor:-
-
cpe:2.3:h:sinapsitech:esolar_photovoltaic_system_monitor:-
-
cpe:2.3:o:sinapsitech:sinapsi_firmware:*