Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Sinapsitech Clear all filters
TI-2012-04893 CVE-2012-5864 · GHSA-v26h-2hg9-6mq7

Sinapsi eSolar Improper Authentication

Priority MEDIUM 51

These Sinapsi devices do not check if users that visit pages within the device have properly authenticated.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04905 Published 2012-11-23 Fixed in 2.0.2870_xxx_2.2.12 CWE-287
TI-2012-04892 CVE-2012-5863 · GHSA-44xp-g462-97fp

Sinapsi eSolar OS Command Injection

Priority MEDIUM 64

These Sinapsi devices do not check for special elements in commands sent to the system.

CVSS 2.0CRITICAL 10.0 Network No auth Interaction — EPSS 0.24823 Published 2012-11-23 Fixed in 2.0.2870_xxx_2.2.12 CWE-78
TI-2012-04891 CVE-2012-5862 · GHSA-8xw2-rf2c-8v7w

Sinapsi eSolar Hard-Coded Password

Priority MEDIUM 57

These Sinapsi devices store hard-coded passwords in the PHP file of the device.

CVSS 2.0CRITICAL 10.0 Network No auth Interaction — EPSS 0.12079 Published 2012-11-23 Fixed in 2.0.2870_xxx_2.2.12 CWE-259
TI-2012-04890 CVE-2012-5861 · GHSA-f4r2-hvg9-43x3

Sinapsi eSolar SQL Injection

Priority MEDIUM 41

These Sinapsi devices do not check the validity of the data before executing queries.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.04239 Published 2012-11-23 Fixed in 2.0.2870_xxx_2.2.12 CWE-89