3547 matches found
CVE-2012-5861
CVE-2012-5861 affects Sinapsi Sinapsi eSolar family devices (Light, DUO, eSolar) with firmware prior to 2.0.2870_xxx_2.2.12. The issue is SQL injection caused by unvalidated data in web-facing components, allowing remote attackers to access SQL tables and leak confidential information. The relate...
CVE-2012-5861 Sinapsi eSolar SQL Injection
These Sinapsi devices do not check the validity of the data before executing queries. By accessing the SQL table of certain pages that do not require authentication within the device, attackers can leak information from the device. This could allow the attacker to compromise confidentiality...
CVE-2012-5862 Sinapsi eSolar Hard-Coded Password
These Sinapsi devices store hard-coded passwords in the PHP file of the device. By using the hard-coded passwords in the device, attackers can log into the device with administrative privileges. This could allow the attacker to have unauthorized access...
IOServer XML Server URI Directory Traversal Arbitrary File Access
Binary data scadaioserverxmlserverdirectorytraversal.nbin...
SCADA DNP3 read function code
...
SCADA DNP3 freeze function code
...
SCADA DNP3 get file info function code
...
SCADA DNP3 assign class function code
...
SCADA DNP3 auth reply function code
...
SCADA DNP3 server response function code
...
SCADA DNP3 abort file function code
...
SCADA DNP3 init app function code
...
SCADA DNP3 auth request function code
...
SCADA DNP3 auth error function code
...
SCADA DNP3 warm restart function code
...
SCADA PcVue Activex Control Insecure Method (AddPage)
...
SCADA DNP3 write function code
...
SCADA DNP3 close file request
...