CVE-2012-5864CWE-287

CVE-2012-5864: vulnerability in Sinapsi eSolar

Sinapsi eSolar Improper Authentication

Published · Updated

Follow this CVE+ Monitor eSolar+ Monitor eSolar DUO

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

48Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 9.4epss 4.9%
from disclosure to weaponsame day
Published on NVDNov 23
1st PoCSep 12
These Sinapsi devices do not check if users that visit pages within the device have properly authenticated. By directly visiting the pages within the device, attackers can gain unauthorized access with administrative privileges.
AV:N/AC:L/Au:N/C:C/I:C/A:N
Affected products
Sinapsi · eSolarSinapsi · eSolar DUOSinapsi · eSolar Light
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Sinapsi eSolar

In the same product, most dangerous first.

CVE-2012-5863—Sinapsi eSolar OS Command InjectionEPSS 24.8%CVE-2012-5862—Sinapsi eSolar Hard-Coded PasswordEPSS 12.1%CVE-2012-5861—Sinapsi eSolar SQL InjectionEPSS 4.2%