solar-log records
11 published records for vendor solar-log.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 81.8%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-269 Improper Privilege Management3
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
- CWE-284 Improper Access Control1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-404 Improper Resource Shutdown or Release1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
11 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2022-47767No exploit | A backdoor in Solar-Log Gateway products allows remote access via web panel gaining super administration privileges to the attacker.solar-log · solar-log 250 firmware · CWE-912 | Critical9.8 | — | 1.2% | Jan 26, 2023 |
39Monitor | CVE-2017-20025No exploit | Solare Solar-Log Flash Memory privileges managementsolar-log · solar-log 250 firmware · CWE-269 | Critical9.8 | — | 1.0% | Jun 9, 2022 |
39Monitor | CVE-2017-20021No exploit | Solare Solar-Log File Upload privileges managementsolar-log · solar-log 250 firmware · CWE-269 | Critical9.8 | — | 1.0% | Jun 9, 2022 |
39Monitor | CVE-2017-20023No exploit | Solare Solar-Log Network Config privileges managementsolar-log · solar-log 250 firmware · CWE-269 | Critical9.8 | — | 0.8% | Jun 9, 2022 |
39Monitor | CVE-2024-40117No exploit | Incorrect access control in Solar-Log 1000 before v2.8.2 and build 52- 23.04.2013 allows attackers to obtain Administrative privileges via cCWE-284 | Critical9.8 | — | 0.7% | Jul 26, 2024 |
35Monitor | CVE-2017-20020No exploit | Solare Solar-Log cross-site request forgerysolar-log · solar-log 250 firmware · CWE-352 | High8.8 | — | 0.4% | Jun 9, 2022 |
32Monitor | CVE-2024-40116No exploit | An issue in Solar-Log 1000 before v2.8.2 and build 52-23.04.2013 was discovered to store plaintext passwords in the export.html, email.html,CWE-256 | High8.1 | — | 0.4% | Jul 26, 2024 |
30Monitor | CVE-2017-20022No exploit | Solare Solar-Log information disclosuresolar-log · solar-log 250 firmware · CWE-200 | High7.5 | — | 1.4% | Jun 9, 2022 |
30Monitor | CVE-2017-20024No exploit | Solare Solar-Log denial of servicesolar-log · solar-log 250 firmware · CWE-404 | High7.5 | — | 1.2% | Jun 9, 2022 |
30Monitor | CVE-2017-20019No exploit | Solare Solar-Log Config information disclosuresolar-log · solar-log 250 firmware · CWE-200 | High7.5 | — | 1.0% | Jun 9, 2022 |
21Monitor | CVE-2023-46344Proof of concept | A vulnerability in Solar-Log Base 15 Firmware 6.0.1 Build 161, and possibly other Solar-Log Base products, allows an attacker to escalate thsolar-log · 2000 pm\+ firmware · CWE-79 | Medium5.4 | — | 0.4% | Feb 1, 2024 |
- CVE-2022-4776739Monitor
A backdoor in Solar-Log Gateway products allows remote access via web panel gaining super administration privileges to the attacker.
CriticalCVSS 9.8No exploitEPSS 1%solar-log · solar-log 250 firmwareJan 26, 2023
- CVE-2017-2002539Monitor
Solare Solar-Log Flash Memory privileges management
CriticalCVSS 9.8No exploitEPSS 1%solar-log · solar-log 250 firmwareJun 9, 2022
- CVE-2017-2002139Monitor
Solare Solar-Log File Upload privileges management
CriticalCVSS 9.8No exploitEPSS 1%solar-log · solar-log 250 firmwareJun 9, 2022
- CVE-2017-2002339Monitor
Solare Solar-Log Network Config privileges management
CriticalCVSS 9.8No exploitEPSS 0%solar-log · solar-log 250 firmwareJun 9, 2022
- CVE-2024-4011739Monitor
Incorrect access control in Solar-Log 1000 before v2.8.2 and build 52- 23.04.2013 allows attackers to obtain Administrative privileges via c
CriticalCVSS 9.8No exploitEPSS 0%Jul 26, 2024
- CVE-2017-2002035Monitor
Solare Solar-Log cross-site request forgery
HighCVSS 8.8No exploitEPSS 0%solar-log · solar-log 250 firmwareJun 9, 2022
- CVE-2024-4011632Monitor
An issue in Solar-Log 1000 before v2.8.2 and build 52-23.04.2013 was discovered to store plaintext passwords in the export.html, email.html,
HighCVSS 8.1No exploitEPSS 0%Jul 26, 2024
- CVE-2017-2002230Monitor
Solare Solar-Log information disclosure
HighCVSS 7.5No exploitEPSS 1%solar-log · solar-log 250 firmwareJun 9, 2022
- CVE-2017-2002430Monitor
Solare Solar-Log denial of service
HighCVSS 7.5No exploitEPSS 1%solar-log · solar-log 250 firmwareJun 9, 2022
- CVE-2017-2001930Monitor
Solare Solar-Log Config information disclosure
HighCVSS 7.5No exploitEPSS 1%solar-log · solar-log 250 firmwareJun 9, 2022
- CVE-2023-4634421Monitor
A vulnerability in Solar-Log Base 15 Firmware 6.0.1 Build 161, and possibly other Solar-Log Base products, allows an attacker to escalate th
MediumCVSS 5.4Proof of conceptEPSS 0%solar-log · 2000 pm\+ firmwareFeb 1, 2024