PT-2023-15480 · Unknown+5 · Solar-Log Gateway+6

Andrea D’Ubaldo + 1 · Publicado 2023-01-25 · Atualizado 2024-11-11 · CVE-2022-47767

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Solar-Log Gateway products versions v4.2.7 through v5.1.1

Description A backdoor in Solar-Log Gateway products allows remote access via the web panel, gaining super administration privileges to the attacker.

Recommendations For Solar-Log devices SL 250, 300, 1200, 2000, SL 50 Gateway, update to firmware version 4.2.8 or later. For SL Base, update to firmware version 5.1.2 or 6.0.0 or later.

Exploit

Correção

Hidden Functionality

Enumeração de Fraquezas

CWE-912

Identificadores relacionados

CVE-2022-47767

Produtos afetados

Sl 1200

Sl 2000

Sl 250

Sl 300

Sl 50 Gateway

Sl Base

Solar-Log Gateway

Referências · 5

• 🔥 https://swascan.com/security-advisory-solar-log · Exploit
• https://osv.dev/vulnerability/CVE-2022-47767 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2022-47767 · Nota de Segurança
• https://solar-log.com/en/support/firmware-database-1 · Aviso do Fabricante
• https://t.me/cvenotify/101315 · Publicação no Telegram