SINAPSI eSolar Light Photovoltaic System Monitor Multiple Security Vulnerabilities
BID:55872
Info
SINAPSI eSolar Light Photovoltaic System Monitor Multiple Security Vulnerabilities
| Bugtraq ID: | 55872 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 12 2012 12:00AM |
| Updated: | Sep 12 2012 12:00AM |
| Credit: | Roberto Paleari and Ivan Speziale |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
SINAPSI eSolar Light Photovoltaic System Monitor Multiple Security Vulnerabilities
SINAPSI eSolar Light Photovoltaic System Monitor is prone to a command-injection vulnerability, multiple SQL-injection vulnerabilities, and multiple security-bypass vulnerabilities.
Exploiting these issues may allow an attacker to perform unauthorized actions, execute arbitrary code with administrative privileges, bypass security restrictions, or gain unauthorized access to the device.
SINAPSI eSolar Light Photovoltaic System Monitor is prone to a command-injection vulnerability, multiple SQL-injection vulnerabilities, and multiple security-bypass vulnerabilities.
Exploiting these issues may allow an attacker to perform unauthorized actions, execute arbitrary code with administrative privileges, bypass security restrictions, or gain unauthorized access to the device.
Exploit / POC
SINAPSI eSolar Light Photovoltaic System Monitor Multiple Security Vulnerabilities
An attacker can use a browser or readily available utilities to exploit these issues.
The following example code is available:
An attacker can use a browser or readily available utilities to exploit these issues.
The following example code is available:
Solution / Fix
SINAPSI eSolar Light Photovoltaic System Monitor Multiple Security Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
SINAPSI eSolar Light Photovoltaic System Monitor Multiple Security Vulnerabilities
References:
References: