Read the docs

Sinapsi

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Sinapsi records in CISA KEV

No Sinapsi vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Esolar Light Firmware 1 record LOW

Records

5 records

TI-2012-04892 CVE-2012-5863 · GHSA-44xp-g462-97fp

Sinapsi eSolar OS Command Injection

Priority MEDIUM 64

These Sinapsi devices do not check for special elements in commands sent to the system.

CVSS 2.0CRITICAL 10.0 Network No auth Interaction — EPSS 0.24823 Published 2012-11-23 Fixed in 2.0.2870_xxx_2.2.12 CWE-78
TI-2012-04891 CVE-2012-5862 · GHSA-8xw2-rf2c-8v7w

Sinapsi eSolar Hard-Coded Password

Priority MEDIUM 57

These Sinapsi devices store hard-coded passwords in the PHP file of the device.

CVSS 2.0CRITICAL 10.0 Network No auth Interaction — EPSS 0.12079 Published 2012-11-23 Fixed in 2.0.2870_xxx_2.2.12 CWE-259
TI-2012-04893 CVE-2012-5864 · GHSA-v26h-2hg9-6mq7

Sinapsi eSolar Improper Authentication

Priority MEDIUM 51

These Sinapsi devices do not check if users that visit pages within the device have properly authenticated.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04905 Published 2012-11-23 Fixed in 2.0.2870_xxx_2.2.12 CWE-287
TI-2012-04890 CVE-2012-5861 · GHSA-f4r2-hvg9-43x3

Sinapsi eSolar SQL Injection

Priority MEDIUM 41

These Sinapsi devices do not check the validity of the data before executing queries.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.04239 Published 2012-11-23 Fixed in 2.0.2870_xxx_2.2.12 CWE-89
Open these records in search →