Design/Logic Flaw

2023-01-2621:18:00

PRIOn knowledge base

www.prio-n.com

design flaw

logic flaw

solar-log devices

remote access

super administration

web panel

firmware vulnerability

9.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.2%

JSON

A backdoor in Solar-Log Gateway products allows remote access via web panel gaining super administration privileges to the attacker. This affects all Solar-Log devices that use firmware version v4.2.7 up to v5.1.1 (included).

CPENameOperatorVersion
solar-log_1000_firmwareeq< 4.2.8-117
solar-log_1000_firmwarege5.0.0
solar-log_1000_firmwarelt5.1.2
solar-log_1000_pm\\+_firmwareeq< 4.2.8-117
solar-log_1000_pm\\+_firmwarege5.0.0
solar-log_1000_pm\\+_firmwarelt5.1.2
solar-log_1200_firmwareeq< 4.2.8-117
solar-log_1200_firmwarege5.0.0
solar-log_1200_firmwarelt5.1.2
solar-log_2000_firmwareeq< 4.2.8-117

Name	Operator	Version
solar-log_1000_firmware	eq	< 4.2.8-117
solar-log_1000_firmware	ge	5.0.0
solar-log_1000_firmware	lt	5.1.2
solar-log_1000_pm\\+_firmware	eq	< 4.2.8-117
solar-log_1000_pm\\+_firmware	ge	5.0.0
solar-log_1000_pm\\+_firmware	lt	5.1.2
solar-log_1200_firmware	eq	< 4.2.8-117
solar-log_1200_firmware	ge	5.0.0
solar-log_1200_firmware	lt	5.1.2
solar-log_2000_firmware	eq	< 4.2.8-117