Sinapsi Devices Vulnerabilities

🗓️ 24 Aug 2012 06:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 36 Views

Sinapsi eSolar Light and other Sinapsi devices are vulnerable to hard-coded credentials, SQL injection, and operating system command injection. Attackers can gain unauthorized access, access private information, and execute remote code, compromising availability, integrity, and confidentiality of the systems.

Reporter	Title	Published	Views	Family All 13
CVE	CVE-2012-5861	23 Nov 201211:00	–	cve
CVE	CVE-2012-5862	23 Nov 201211:00	–	cve
Cvelist	CVE-2012-5861 Sinapsi eSolar SQL Injection	23 Nov 201211:00	–	cvelist
Cvelist	CVE-2012-5862 Sinapsi eSolar Hard-Coded Password	23 Nov 201211:00	–	cvelist
EUVD	EUVD-2012-5739	7 Oct 202500:30	–	euvd
NVD	CVE-2012-5861	23 Nov 201212:09	–	nvd
NVD	CVE-2012-5862	23 Nov 201212:09	–	nvd
Prion	Sql injection	23 Nov 201212:09	–	prion
Prion	Hardcoded credentials	23 Nov 201212:09	–	prion
Prion	Sql injection	23 Dec 201221:55	–	prion

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2012/icsa-12-325-01.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-12-325-01
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
cisa	www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
cisa	www.cisa.gov/uscert/ncas/tips/ST04-014

24 Aug 2012 06:00Current

7.8High risk

Vulners AI Score7.8

CVSS 210

EPSS0.18257