CVEvulnerability

CVE-2012-5863

10.0 HIGH Published 2012-11-23 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2012-11-23
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS 2.0 ([email protected]): 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses: CWE-264, CWE-78

Description

These Sinapsi devices do not check for special elements in commands sent to the system. By accessing certain pages with administrative privileges that do not require authentication within the device, attackers can execute arbitrary, unexpected, or dangerous commands directly onto the operating system.

Affected configurations

• sinapsitech sinapsi firmware (<= 2.0.2870) • sinapsitech esolar duo photovoltaic system monitor • sinapsitech esolar light photovoltaic system monitor • sinapsitech esolar photovoltaic system monitor

Weakness · not in database (1)

CWE-264

Weakness · CWE (1)

CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References

http://archives.neohapsis.com/archives/bugtraq/2012-09/0045.html Exploit
http://www.exploit-db.com/exploits/21273/ Exploit
http://www.sinapsitech.it/default.asp?active_page_id=78&news_id=88 www.sinapsitech.it
https://exchange.xforce.ibmcloud.com/vulnerabilities/80200 exchange.xforce.ibmcloud.com
https://www.cisa.gov/news-events/ics-advisories/icsa-12-325-01 www.cisa.gov
http://archives.neohapsis.com/archives/bugtraq/2012-09/0045.html Exploit
http://www.exploit-db.com/exploits/21273/ Exploit
http://www.sinapsitech.it/default.asp?active_page_id=78&news_id=88 www.sinapsitech.it
http://www.us-cert.gov/control_systems/pdf/ICSA-12-325-01.pdf US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/80202 exchange.xforce.ibmcloud.com