The management web pages on the Sinapsi eSolar Light Photovoltaic System Monitor (aka Schneider Electric Ezylog photovoltaic SCADA management server), Sinapsi eSolar, and Sinapsi eSolar DUO with firmware before 2.0.2870_2.2.12 do not require authentication, which allows remote attackers to obtain administrative access via a direct request, as demonstrated by a request to ping.php.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: icscert
Published: 2012-11-23T11:00:00
Updated: 2024-08-06T21:21:27.322Z
Reserved: 2012-11-14T00:00:00
Link: CVE-2012-5864
Vulnrichment
No data.
NVD
Status : Modified
Published: 2012-11-23T12:09:58.540
Modified: 2024-11-21T01:45:23.600
Link: CVE-2012-5864
Redhat
No data.