CVE-2012-5862

highPriorität · beachten · 54OT-Risiko · hochEPSS 0.121 · 96. PerzentilExploit · PoCEUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

1 exploit · PoC

Likely / severe?

12.1% (96th) EPSS

CVSS 10 · high

Is it mine?

13 products

Prüfe deine Angriffsfläche

Who says so?

4 sources

cnnvd · enisa_euvd · cisa_csaf_ot · nvd

EPSS · bewertet 2026-10-26

These Sinapsi devices store hard-coded passwords in the PHP file of the device. By using the hard-coded passwords in the device, attackers can log into the device with administrative privileges. This could allow the attacker to have unauthorized access.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.

MitigationeSolarcisa_csaf_ot
Other affected vendors have been notified by Sinapsi and ICS-CERT, but the availability of new firmware upgrades are unknown by ICS-CERT at this time.
MitigationeSolar DUOcisa_csaf_ot
Other affected vendors have been notified by Sinapsi and ICS-CERT, but the availability of new firmware upgrades are unknown by ICS-CERT at this time.
MitigationeSolar Lightcisa_csaf_ot
Other affected vendors have been notified by Sinapsi and ICS-CERT, but the availability of new firmware upgrades are unknown by ICS-CERT at this time.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

10.0

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · high–critical · 8.5–10

v2.010highAV:N/AC:L/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 10

v2.010criticalAV:N/AC:L/Au:N/C:C/I:C/A:Csecondary · CISA US

v2.010criticalAV:N/AC:L/Au:N/C:C/I:C/A:Csecondary · ENISA EU

v2.010highAV:N/AC:L/Au:N/C:C/I:C/A:Csecondary · ics-cert@hq.dhs.gov USAusnutzbarkeit 10 · Auswirkung 10

v2.08.5highAV:N/AC:L/Au:N/C:C/I:C/A:C/E:Usecondary · CVSS-BT (t0sche)

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-259USCWE-259USCWE-310US

Exploits (1)

Öffentlicher Proof-of-Concept- und Exploit-Code.

EDB-21273Ezylog Photovoltaic Management Server - Multiple VulnerabilitiesPoC · exploit_db

betroffene Produkte (13)

Betroffene Produkte und Versionsbereiche.

Sinapsi eSolar DUO: <2.0.2870_xxx_2.2.12alle Versionencisa_csaf_otUS
Sinapsi eSolar Light: <2.0.2870_xxx_2.2.12alle Versionencisa_csaf_otUS
Sinapsi eSolar: <2.0.2870_xxx_2.2.12alle Versionencisa_csaf_otUS
Sinapsi eSolar< 2.0.2870_xxx_2.2.12cisa_csaf_otUS
Sinapsi eSolar DUO< 2.0.2870_xxx_2.2.12cisa_csaf_otUS
Sinapsi eSolar Light< 2.0.2870_xxx_2.2.12cisa_csaf_otUS
Sinapsi eSolar0 → 2.0.2870_xxx_2.2.12enisa_euvdEU
Sinapsi eSolar DUO0 → 2.0.2870_xxx_2.2.12enisa_euvdEU
Sinapsi eSolar Light0 → 2.0.2870_xxx_2.2.12enisa_euvdEU
sinapsitech esolar duo photovoltaic system monitoralle VersionennvdUScpe:2.3:h:sinapsitech:esolar_duo_photovoltaic_system_monitor:*:*:*:*:*:*:*:*
sinapsitech esolar light photovoltaic system monitoralle VersionennvdUScpe:2.3:h:sinapsitech:esolar_light_photovoltaic_system_monitor:*:*:*:*:*:*:*:*
sinapsitech esolar photovoltaic system monitoralle VersionennvdUScpe:2.3:h:sinapsitech:esolar_photovoltaic_system_monitor:*:*:*:*:*:*:*:*
sinapsitech sinapsi firmware≤ 2.0.2870nvdUScpe:2.3:o:sinapsitech:sinapsi_firmware:*:*:*:*:*:*:*:*

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

ICSA-12-325-01Sinapsi Devices Vulnerabilities2012-08-24icsa · cisa_csaf_otUS
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd cisa_csaf_ot nvd NVD CVE.org MITRE

veröffentlicht 2012-11-23geändert 2026-06-16

Referenzen (15)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan