login.php on the Sinapsi eSolar Light Photovoltaic System Monitor (aka Schneider Electric Ezylog photovoltaic SCADA management server), Sinapsi eSolar, and Sinapsi eSolar DUO with firmware before 2.0.2870_2.2.12 establishes multiple hardcoded accounts, which makes it easier for remote attackers to obtain administrative access by leveraging a (1) cleartext password or (2) password hash contained in this script, as demonstrated by a password of astridservice or 36e44c9b64.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: icscert

Published: 2012-11-23T11:00:00

Updated: 2024-08-06T21:21:27.480Z

Reserved: 2012-11-14T00:00:00

Link: CVE-2012-5862

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2012-11-23T12:09:58.430

Modified: 2024-11-21T01:45:23.357

Link: CVE-2012-5862

cve-icon Redhat

No data.