Описание
An issue was discovered in Solar-Log 500 before 2.8.2 Build 52 23.04.2013. In /export.html, email.html, and sms.html, cleartext passwords are stored. This may allow sensitive information to be read by someone with access to the device. Fixed with 3.0.0-60 11.10.2013 for SL 200, 500, 1000 / not existing for SL 250, 300, 1200, 2000, SL 50 Gateway, SL Base.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party AdvisoryVDB Entry
- ProductRelease NotesVendor Advisory
- ExploitThird Party Advisory
- ExploitThird Party AdvisoryVDB Entry
- ProductRelease NotesVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.8.1 (включая)
Одновременно
Одно из
cpe:2.3:o:bkw:solar-log_500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:bkw:solar-log_500_firmware:2.8.2:build_50:*:*:*:*:*:*
cpe:2.3:h:bkw:solar-log_500:-:*:*:*:*:*:*:*
EPSS
Процентиль: 60%
0.00396
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-312
Связанные уязвимости
CVSS3: 6.5
github
около 4 лет назад
An issue was discovered in Solar-Log 500 before 2.8.2 Build 52 23.04.2013. In /export.html, email.html, and sms.html, cleartext passwords are stored. This may allow sensitive information to be read by someone with access to the device.
EPSS
Процентиль: 60%
0.00396
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-312