CVE-2022-47767
Summary
| CVE | CVE-2022-47767 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-01-26 21:18:00 UTC |
| Updated | 2023-02-06 17:05:00 UTC |
| Description | A backdoor in Solar-Log Gateway products allows remote access via web panel gaining super administration privileges to the attacker. This affects all Solar-Log devices that use firmware version v4.2.7 up to v5.1.1 (included). |
Risk And Classification
Problem Types: NVD-CWE-noinfo
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Solar-log | Solar-log 1000 | - | All | All | All |
| Operating System | Solar-log | Solar-log 1000 Firmware | All | All | All | All |
| Hardware | Solar-log | Solar-log 1000 Pm | - | All | All | All |
| Operating System | Solar-log | Solar-log 1000 Pm Firmware | All | All | All | All |
| Hardware | Solar-log | Solar-log 1200 | - | All | All | All |
| Operating System | Solar-log | Solar-log 1200 Firmware | All | All | All | All |
| Hardware | Solar-log | Solar-log 2000 | - | All | All | All |
| Operating System | Solar-log | Solar-log 2000 Firmware | All | All | All | All |
| Hardware | Solar-log | Solar-log 250 | - | All | All | All |
| Operating System | Solar-log | Solar-log 250 Firmware | All | All | All | All |
| Hardware | Solar-log | Solar-log 300 | - | All | All | All |
| Operating System | Solar-log | Solar-log 300 Firmware | All | All | All | All |
| Hardware | Solar-log | Solar-log 50 | - | All | All | All |
| Hardware | Solar-log | Solar-log 500 | - | All | All | All |
| Operating System | Solar-log | Solar-log 500 Firmware | All | All | All | All |
| Operating System | Solar-log | Solar-log 50 Firmware | All | All | All | All |
| Hardware | Solar-log | Solar-log 800e | - | All | All | All |
| Operating System | Solar-log | Solar-log 800e Firmware | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Solar-Log™ Firmware Download | MISC | www.solar-log.com | |
| Security Advisory: Solar-Log - Swascan | MISC | www.swascan.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.