CVEvulnerability

CVE-2012-5864

10.0 HIGH Published 2012-11-23 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2012-11-23
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 9.4 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:N
CVSS 2.0 ([email protected]): 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses: CWE-264, CWE-287

Description

These Sinapsi devices do not check if users that visit pages within the device have properly authenticated. By directly visiting the pages within the device, attackers can gain unauthorized access with administrative privileges.

Affected configurations

• sinapsitech sinapsi firmware (<= 2.0.2870) • sinapsitech esolar duo photovoltaic system monitor • sinapsitech esolar light photovoltaic system monitor • sinapsitech esolar photovoltaic system monitor

Weakness · not in database (1)

CWE-264

Weakness · CWE (1)

CWE-287 Improper Authentication weakness

References

http://archives.neohapsis.com/archives/bugtraq/2012-09/0045.html Exploit
http://www.exploit-db.com/exploits/21273/ Exploit
http://www.sinapsitech.it/default.asp?active_page_id=78&news_id=88 www.sinapsitech.it
https://exchange.xforce.ibmcloud.com/vulnerabilities/80200 exchange.xforce.ibmcloud.com
https://www.cisa.gov/news-events/ics-advisories/icsa-12-325-01 www.cisa.gov
http://archives.neohapsis.com/archives/bugtraq/2012-09/0045.html Exploit
http://www.exploit-db.com/exploits/21273/ Exploit
http://www.sinapsitech.it/default.asp?active_page_id=78&news_id=88 www.sinapsitech.it
http://www.us-cert.gov/control_systems/pdf/ICSA-12-325-01.pdf US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/80203 exchange.xforce.ibmcloud.com