HIGH🇬🇧 English

CVE-2012-5861

CVSS 7.8v2.0pub. 2012-11-23upd. 2026-04-29

These Sinapsi devices do not check the validity of the data before executing queries. By accessing the SQL table of certain pages that do not require authentication within the device, attackers can leak information from the device. This could allow the attacker to compromise confidentiality.

oryginał EN
CVSS Vector
AV:N/AC:L/Au:N/C:C/I:N/A:N

  • Sinapsitech Esolar Duo Photovoltaic System Monitor

    HW
    Sinapsitech
    wszystkie wersje

  • Sinapsitech Esolar Light Photovoltaic System Monitor

    HW
    Sinapsitech
    wszystkie wersje

  • Sinapsitech Esolar Photovoltaic System Monitor

    HW
    Sinapsitech
    wszystkie wersje

  • Sinapsitech Sinapsi Firmware

    OS
    Sinapsitech
    ≤ 2.0.2870
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
SQLi
CWE
Referencje

Powiązane podatności

CVE-2012-5862HIGH10.0ten sam produkt

These Sinapsi devices store hard-coded passwords in the PHP file of the device. By using the hard-coded passw...

CVE-2012-5863HIGH10.0ten sam produkt

These Sinapsi devices do not check for special elements in commands sent to the system. By accessing certain ...

CVE-2012-5864HIGH9.4ten sam produkt

These Sinapsi devices do not check if users that visit pages within the device have properly authenticated. ...