Lucene search

[email protected]CVE-2021-34544

HistoryDec 07, 2021 - 9:15 p.m.

CVE-2021-34544

2021-12-0721:15:08

CWE-312

[email protected]

web.nvd.nist.gov

solar-log 500

password

cleartext

security vulnerability

cve-2021-34544

nvd

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.2 Medium

AI Score

Confidence

High

0.016 Low

EPSS

Percentile

87.5%

JSON

An issue was discovered in Solar-Log 500 before 2.8.2 Build 52 23.04.2013. In /export.html, email.html, and sms.html, cleartext passwords are stored. This may allow sensitive information to be read by someone with access to the device.

Affected configurations

NVD

Node

bkwsolar-log_500_firmwareRange≤2.8.1

bkwsolar-log_500_firmwareMatch2.8.2build_50

AND

bkwsolar-log_500Match-

CPENameOperatorVersion
bkw:solar-log_500_firmwarebkw solar-log 500 firmwarele2.8.1
bkw:solar-log_500_firmwarebkw solar-log 500 firmwareeq2.8.2

CPE	Name	Operator	Version
bkw:solar-log_500_firmware	bkw solar-log 500 firmware	le	2.8.1
bkw:solar-log_500_firmware	bkw solar-log 500 firmware	eq	2.8.2

References

drive.google.com/file/d/1N8Ch1UGNcoocUaPhOe_1mAECOe5kr4pt/view?usp=sharing

www.exploit-db.com/exploits/49987

www.solar-log.com/en/support/firmware/

Social References

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.2 Medium

AI Score

Confidence

High

0.016 Low

EPSS

Percentile

87.5%

JSON

Related for CVE-2021-34544

prion1 nvd1 cvelist1 cnvd1