CVE-2012-5862

These Sinapsi devicesstore hard-coded passwords in the PHP file of the device. By using thehard-coded passwords in the device, attackers can log into the devicewith administrative privileges. This could allow the attacker to haveunauthorized access.

CVE-2012-5861

These Sinapsi devices do not check the validity of the data beforeexecuting queries. By accessing the SQL table of certain pages that donot require authentication within the device, attackers can leakinformation from the device. This could allow the attacker to compromiseconfidentiality.

CVE-2012-5864

These Sinapsi devicesdo not check if users that visit pages within the device have properlyauthenticated. By directly visiting the pages within the device,attackers can gain unauthorized access with administrative privileges.

CVE-2012-5863

These Sinapsi devices do not check for special elements in commands sentto the system. By accessing certain pages with administrative privilegesthat do not require authentication within the device, attackers canexecute arbitrary, unexpected, or dangerous commands directly onto theoperating system.