Vulnerabilities

TI-2015-03335 CVE-2015-3949 · GHSA-c65h-wc2c-563w

Sinapsi eSolar Light with firmware before 2.0.3970_schsl_2.2.85 allows attackers to…

LOW 11

Sinapsi eSolar Light with firmware before 2.0.3970_schsl_2.2.85 allows attackers to discover cleartext passwords by reading the HTML source code of the mail-configuration page.

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00345 Published 2015-06-13 No fix listed CWE-200

TI-2012-04893 CVE-2012-5864 · GHSA-v26h-2hg9-6mq7

Sinapsi eSolar Improper Authentication

MEDIUM 51

These Sinapsi devices do not check if users that visit pages within the device have properly authenticated.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04905 Published 2012-11-23 Fixed in 2.0.2870_xxx_2.2.12 CWE-287

TI-2012-04892 CVE-2012-5863 · GHSA-44xp-g462-97fp

Sinapsi eSolar OS Command Injection

MEDIUM 64

These Sinapsi devices do not check for special elements in commands sent to the system.

CVSS 2.0CRITICAL 10.0 Network No auth Interaction — EPSS 0.24823 Published 2012-11-23 Fixed in 2.0.2870_xxx_2.2.12 CWE-78

TI-2012-04891 CVE-2012-5862 · GHSA-8xw2-rf2c-8v7w

Sinapsi eSolar Hard-Coded Password

MEDIUM 57

These Sinapsi devices store hard-coded passwords in the PHP file of the device.

CVSS 2.0CRITICAL 10.0 Network No auth Interaction — EPSS 0.12079 Published 2012-11-23 Fixed in 2.0.2870_xxx_2.2.12 CWE-259

TI-2012-04890 CVE-2012-5861 · GHSA-f4r2-hvg9-43x3

Sinapsi eSolar SQL Injection

MEDIUM 41

These Sinapsi devices do not check the validity of the data before executing queries.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.04239 Published 2012-11-23 Fixed in 2.0.2870_xxx_2.2.12 CWE-89