CVE-2023-27920

2023-05-2300:00:00

jpcert

www.cve.org

improper access control

vulnerability

solarview compact

date/time alteration

remote authenticated attacker

4.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.7%

JSON

Improper access control vulnerability in the system date/time setting page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows a remote authenticated attacker to alter system date/time of the affected product.

CNA Affected

[
  {
    "vendor": "Contec Co., Ltd.",
    "product": "SolarView Compact",
    "versions": [
      {
        "version": "SV-CPT-MC310 versions prior to Ver.8.10, and SV-CPT-MC310F versions prior to Ver.8.10",
        "status": "affected"
      }
    ]
  }
]