Vulnerability Details CVE-2012-5861
These Sinapsi devices do not check the validity of the data before
executing queries. By accessing the SQL table of certain pages that do
not require authentication within the device, attackers can leak
information from the device. This could allow the attacker to compromise
confidentiality.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.138
EPSS Ranking 94.3%
CVSS Severity
CVSS v2 Score 7.8
References
- http://archives.neohapsis.com/archives/bugtraq/2012-09/0045.html
- http://www.exploit-db.com/exploits/21273/
- http://www.sinapsitech.it/default.asp?active_page_id=78&news_id=88
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80200
- https://www.cisa.gov/news-events/ics-advisories/icsa-12-325-01
- http://archives.neohapsis.com/archives/bugtraq/2012-09/0045.html
- http://www.exploit-db.com/exploits/21273/
- http://www.sinapsitech.it/default.asp?active_page_id=78&news_id=88
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-325-01.pdf
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80201
Products affected by CVE-2012-5861
-
cpe:2.3:h:sinapsitech:esolar_duo_photovoltaic_system_monitor:-
-
cpe:2.3:h:sinapsitech:esolar_light_photovoltaic_system_monitor:-
-
cpe:2.3:h:sinapsitech:esolar_photovoltaic_system_monitor:-
-
cpe:2.3:o:sinapsitech:sinapsi_firmware:*