CVE-2021-34543

The web administration server in Solar-Log 500 before 2.8.2 Build 52 does not require authentication, which allows remote attackers to gain administrative privileges by connecting to the server. As a result, the attacker can modify configuration files and change the system status. Fixed with 3.0.0-60 11.10.2013 for SL 200, 500, 1000 / not existing for SL 250, 300, 1200, 2000, SL 50 Gateway, SL Base.

• CWE-306

• https://drive.google.com/file/d/1z1TaANlDyX4SOP2vjNzkPQI3nETL9kZM/view?usp=sharingExploit, Third Party Advisory
• https://www.exploit-db.com/exploits/49986Exploit, Third Party Advisory, VDB Entry
• https://www.solar-log.com/en/support/firmware/Product, Release Notes, Vendor Advisory
• https://drive.google.com/file/d/1z1TaANlDyX4SOP2vjNzkPQI3nETL9kZM/view?usp=sharingExploit, Third Party Advisory
• https://www.exploit-db.com/exploits/49986Exploit, Third Party Advisory, VDB Entry
• https://www.solar-log.com/en/support/firmware/Product, Release Notes, Vendor Advisory

Published

Dec 7, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-34536Windows Storage Spaces Controller Elevation of Privilege Vul…7.8
• CVE-2021-34537Windows Bluetooth Driver Elevation of Privilege Vulnerabilit…7.8
• CVE-2021-34538Apache Hive before 3.1.3 "CREATE" and "DROP" function operat…7.5
• CVE-2021-34539An issue was discovered in CubeCoders AMP before 2.1.1.8. A …7.2
• CVE-2021-3454Truncated L2CAP K-frame causes assertion failure. Zephyr ver…7.5
• CVE-2021-34540Advantech WebAccess 8.4.2 and 8.4.4 allows XSS via the usern…6.1
• CVE-2021-34544An issue was discovered in Solar-Log 500 before 2.8.2 Build …6.5
• CVE-2021-34546An unauthenticated attacker with physical access to a comput…6.8
• CVE-2021-34547PRTG Network Monitor 20.1.55.1775 allows /editsettings CSRF …4.3
• CVE-2021-34548An issue was discovered in Tor before 0.4.6.5, aka TROVE-202…7.5
• CVE-2021-34549An issue was discovered in Tor before 0.4.6.5, aka TROVE-202…7.5
• CVE-2021-3455Disconnecting L2CAP channel right after invalid ATT request …7.5