CVE-2012-5861CWE-89

CVE-2012-5861: vulnerability in Sinapsi eSolar

Sinapsi eSolar SQL Injection

Published · Updated

Follow this CVE+ Monitor eSolar+ Monitor eSolar DUO

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

41Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 7.8epss 4.2%
from disclosure to weaponsame day
Published on NVDNov 23
1st PoCSep 12
These Sinapsi devices do not check the validity of the data before executing queries. By accessing the SQL table of certain pages that do not require authentication within the device, attackers can leak information from the device. This could allow the attacker to compromise confidentiality.
AV:N/AC:L/Au:N/C:C/I:N/A:N
Affected products
Sinapsi · eSolarSinapsi · eSolar DUOSinapsi · eSolar Light
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Sinapsi eSolar

In the same product, most dangerous first.

CVE-2012-5863—Sinapsi eSolar OS Command InjectionEPSS 24.8%CVE-2012-5862—Sinapsi eSolar Hard-Coded PasswordEPSS 12.1%CVE-2012-5864—Sinapsi eSolar Improper AuthenticationEPSS 4.9%