CVE-2012-5863
Last modified
CVE-2012-5863 is a vulnerability of currently unknown severity. These Sinapsi devices do not check for special elements in commands sent to the system. By accessing certain pages with administrative privileges that do not require authentication within the device, attackers can execute arbitrary, unexpected, or dangerous commands directly onto the operating system.. EPSS estimates a 24.82% chance of exploitation in the next 30 days.
Description
These Sinapsi devices do not check for special elements in commands sent to the system. By accessing certain pages with administrative privileges that do not require authentication within the device, attackers can execute arbitrary, unexpected, or dangerous commands directly onto the operating system.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Sinapsitech | Sinapsi Firmware | <= 2.0.2870 |
| Sinapsitech | Esolar Duo Photovoltaic System Monitor | All versions |
| Sinapsitech | Esolar Light Photovoltaic System Monitor | All versions |
| Sinapsitech | Esolar Photovoltaic System Monitor | All versions |
References
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-325-01.pdfUS Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2012-5863?
How severe is CVE-2012-5863?
How do I fix CVE-2012-5863?
Are you affected by CVE-2012-5863?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST