Lucene search

MitreCVE-2021-34544

HistoryDec 07, 2021 - 9:15 p.m.

CVE-2021-34544

2021-12-0721:15:08

CWE-312

mitre

web.nvd.nist.gov

solar-log 500

password

cleartext

security vulnerability

cve-2021-34544

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.2

Confidence

High

EPSS

0.016

Percentile

87.7%

JSON

An issue was discovered in Solar-Log 500 before 2.8.2 Build 52 23.04.2013. In /export.html, email.html, and sms.html, cleartext passwords are stored. This may allow sensitive information to be read by someone with access to the device.

Affected configurations

Nvd

Node

bkwsolar-log_500_firmwareRange≤2.8.1

bkwsolar-log_500_firmwareMatch2.8.2build_50

AND

bkwsolar-log_500Match-

VendorProductVersionCPE
bkwsolar-log_500_firmware*cpe:2.3:o:bkw:solar-log_500_firmware:*:*:*:*:*:*:*:*
bkwsolar-log_500_firmware2.8.2cpe:2.3:o:bkw:solar-log_500_firmware:2.8.2:build_50:*:*:*:*:*:*
bkwsolar-log_500-cpe:2.3:h:bkw:solar-log_500:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
bkw	solar-log_500_firmware	*	cpe:2.3:o:bkw:solar-log_500_firmware::::::::
bkw	solar-log_500_firmware	2.8.2	cpe:2.3:o:bkw:solar-log_500_firmware:2.8.2:build_50::::::
bkw	solar-log_500	-	cpe:2.3:h:bkw:solar-log_500:-:::::::*

References

drive.google.com/file/d/1N8Ch1UGNcoocUaPhOe_1mAECOe5kr4pt/view?usp=sharing

www.exploit-db.com/exploits/49987

www.solar-log.com/en/support/firmware/

Social References

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.2

Confidence

High

EPSS

0.016

Percentile

87.7%

JSON

Related for CVE-2021-34544