Solar-Log 500 2.8.2 - Incorrect Access Control Detection

Solar-Log 500 2.8.2 is susceptible to incorrect access control because the web administration server for Solar-Log 500 all versions prior to 2.8.2 Build 52 does not require authentication, which allows arbitrary remote attackers gain administrative privileges by connecting to the server...

Solar-Log - Monitoring Panel Detection

Solar-Log is a solar plant monitoring system by Solare Datensysteme GmbH Germany used for PV system monitoring, yield optimisation, and fault detection. The web interface is commonly exposed on port 80, 81, or non-standard ports. !/usr/bin/env python3 -- coding: utf-8 -- """Solar-Log is a solar...

EUVD-2017-11036

Malware in sbrugna...

EUVD-2021-21195

Malware in sbrugna...

EUVD-2021-21196

Malware in sbrugna...

EUVD-2017-11034

Malware in sbrugna...

EUVD-2017-11038

Malware in sbrugna...

EUVD-2017-11040

Malware in sbrugna...

EUVD-2017-11035

Malware in sbrugna...

EUVD-2023-50564

Malicious code in bioql PyPI...

EUVD-2022-50524

Malicious code in bioql PyPI...

EUVD-2024-38416

Malicious code in bioql PyPI...

EUVD-2022-24609

Malicious code in bioql PyPI...

CVE-2024-40116

An issue in Solar-Log 1000 before v2.8.2 and build 52-23.04.2013 was discovered to store plaintext passwords in the export.html, email.html, and sms.html files -- fixed with 3.0.0-60 11.10.2013 for SL 200, 500, 1000 / not existing for SL 250, 300, 1200, 2000, SL 50 Gateway, SL Base...

CVE-2024-40117

Incorrect access control in Solar-Log 1000 before v2.8.2 and build 52- 23.04.2013 allows attackers to obtain Administrative privileges via connecting to the web administration server. Not existing for SL 200, 500, 1000 / fixed in 4.2.8 for SL 250, 300, 1200, 2000, SL 50 Gateway / fixed in 5.1.2 /...

CVE-2023-46344

A vulnerability in Solar-Log Base 15 Firmware 6.0.1 Build 161, and possibly other Solar-Log Base products, allows an attacker to escalate their privileges by exploiting a stored cross-site scripting XSS vulnerability in the switch group function under /ilang=DE=csmartenergyswgroups in the web...

CVE-2022-47767

A backdoor in Solar-Log Gateway products allows remote access via web panel gaining super administration privileges to the attacker. This affects Solar-Log devices that use firmware version v4.2.7 up to v5.1.1 included. This does not exist in SL 200, 500, 1000 / fixed in 4.2.8 for SL 250, 300,...

CVE-2021-34544

An issue was discovered in Solar-Log 500 before 2.8.2 Build 52 23.04.2013. In /export.html, email.html, and sms.html, cleartext passwords are stored. This may allow sensitive information to be read by someone with access to the device. Fixed with 3.0.0-60 11.10.2013 for SL 200, 500, 1000 / not...

CVE-2021-34543

The web administration server in Solar-Log 500 before 2.8.2 Build 52 does not require authentication, which allows remote attackers to gain administrative privileges by connecting to the server. As a result, the attacker can modify configuration files and change the system status. Fixed with...

CVE-2017-20019

A vulnerability classified as problematic was found in Solare Solar-Log 2.8.4-56/3.5.2-85. Affected by this vulnerability is an unknown functionality of the component Config Handler. The manipulation leads to information disclosure. The attack can be launched remotely. Upgrading to version 3.5.3-...