CVEvulnerability
CVE-2012-5861
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-11-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:C/I:N/A:N
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
These Sinapsi devices do not check the validity of the data before
executing queries. By accessing the SQL table of certain pages that do
not require authentication within the device, attackers can leak
information from the device. This could allow the attacker to compromise
confidentiality.
Affected configurations
• sinapsitech sinapsi firmware (<= 2.0.2870)
• sinapsitech esolar duo photovoltaic system monitor
• sinapsitech esolar light photovoltaic system monitor
• sinapsitech esolar photovoltaic system monitor
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://archives.neohapsis.com/archives/bugtraq/2012-09/0045.html Exploit
- http://www.exploit-db.com/exploits/21273/ Exploit
- http://www.sinapsitech.it/default.asp?active_page_id=78&news_id=88 www.sinapsitech.it
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80200 exchange.xforce.ibmcloud.com
- https://www.cisa.gov/news-events/ics-advisories/icsa-12-325-01 www.cisa.gov
- http://archives.neohapsis.com/archives/bugtraq/2012-09/0045.html Exploit
- http://www.exploit-db.com/exploits/21273/ Exploit
- http://www.sinapsitech.it/default.asp?active_page_id=78&news_id=88 www.sinapsitech.it
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-325-01.pdf US Government Resource
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80201 exchange.xforce.ibmcloud.com