10

CVE-2012-5862

Exploit

Sinapsi eSolar Hard-Coded Password

These Sinapsi devices
store hard-coded passwords in the PHP file of the device. By using the 
hard-coded passwords in the device, attackers can log into the device 
with administrative privileges. This could allow the attacker to have 
unauthorized access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sinapsitech ≫ Sinapsi Firmware Version <= 2.0.2870
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 11.95% 0.956
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
ics-cert@hq.dhs.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-259 Use of Hard-coded Password

The product contains a hard-coded password, which it uses for its own inbound authentication or for outbound communication to external components.

http://archives.neohapsis.com/archives/bugtraq/2012-09/0045.html
Exploit
http://www.exploit-db.com/exploits/21273/
Exploit
http://www.sinapsitech.it/default.asp?active_page_id=78&news_id=88
http://www.us-cert.gov/control_systems/pdf/ICSA-12-325-01.pdf
US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/80200
https://www.cisa.gov/news-events/ics-advisories/icsa-12-325-01