CVEvulnerability

CVE-2012-5862

10.0 HIGH Published 2012-11-23 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2012-11-23
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS 2.0 ([email protected]): 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses: CWE-259, CWE-310

Description

These Sinapsi devices store hard-coded passwords in the PHP file of the device. By using the hard-coded passwords in the device, attackers can log into the device with administrative privileges. This could allow the attacker to have unauthorized access.

Affected configurations

• sinapsitech sinapsi firmware (<= 2.0.2870) • sinapsitech esolar duo photovoltaic system monitor • sinapsitech esolar light photovoltaic system monitor • sinapsitech esolar photovoltaic system monitor

Weakness · not in database (1)

CWE-310

Weakness · CWE (1)

CWE-259 Use of Hard-coded Password weakness

References

http://archives.neohapsis.com/archives/bugtraq/2012-09/0045.html Exploit
http://www.exploit-db.com/exploits/21273/ Exploit
http://www.sinapsitech.it/default.asp?active_page_id=78&news_id=88 www.sinapsitech.it
https://exchange.xforce.ibmcloud.com/vulnerabilities/80200 exchange.xforce.ibmcloud.com
https://www.cisa.gov/news-events/ics-advisories/icsa-12-325-01 www.cisa.gov
http://archives.neohapsis.com/archives/bugtraq/2012-09/0045.html Exploit
http://www.exploit-db.com/exploits/21273/ Exploit
http://www.sinapsitech.it/default.asp?active_page_id=78&news_id=88 www.sinapsitech.it
http://www.us-cert.gov/control_systems/pdf/ICSA-12-325-01.pdf US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/80200 exchange.xforce.ibmcloud.com