CVE-2012-5864 | BDVDB-2026-53606 Detail
SinapsieSolar
Description#
These Sinapsi devices do not check if users that visit pages within the device have properly authenticated. By directly visiting the pages within the device, attackers can gain unauthorized access with administrative privileges.
Impact#
No impact statement in the source data.
Weaknesses#
- CWE-287 Improper Authentication
References#
- http://www.exploit-db.com/exploits/21273/
- http://archives.neohapsis.com/archives/bugtraq/2012-09/0045.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80200
- https://www.cisa.gov/news-events/ics-advisories/icsa-12-325-01
- http://www.sinapsitech.it/default.asp?active_page_id=78&news_id=88
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80203
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-325-01.pdf
Exploit#
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.