Filtered by vendor Bkw Subscriptions
Filtered by product Solar-log 500 Firmware Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-34543 1 Bkw 2 Solar-log 500, Solar-log 500 Firmware 2024-08-04 7.5 High
The web administration server in Solar-Log 500 before 2.8.2 Build 52 does not require authentication, which allows remote attackers to gain administrative privileges by connecting to the server. As a result, the attacker can modify configuration files and change the system status.
CVE-2021-34544 1 Bkw 2 Solar-log 500, Solar-log 500 Firmware 2024-08-04 6.5 Medium
An issue was discovered in Solar-Log 500 before 2.8.2 Build 52 23.04.2013. In /export.html, email.html, and sms.html, cleartext passwords are stored. This may allow sensitive information to be read by someone with access to the device.