CVE-2012-5862
Sinapsi eSolar Hard-Coded Password
- State
- Published
- Severity
- 10.0 High
- Published
- Nov 23, 2012
- Updated
- Jul 8, 2025
- Reserved
- Nov 14, 2012
Description
These Sinapsi devices store hard-coded passwords in the PHP file of the device. By using the hard-coded passwords in the device, attackers can log into the device with administrative privileges. This could allow the attacker to have unauthorized access.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 2.0 | 10.0 High | AV:N/AC:L/Au:N/C:C/I:C/A:C | icscert |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
eSolarSinapsi |
|
eSolar DUOSinapsi |
|
eSolar LightSinapsi |
|
References
- 21273exploit
- 20120911 Multiple vulnerabilities in Ezylog photovoltaic management servermailing-list
- sinapsi-default-password(80200)vdb-entry
- https://www.cisa.gov/news-events/ics-advisories/icsa-12-325-01
- http://www.sinapsitech.it/default.asp?active_page_id=78&news_id=88
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-325-01.pdf
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.