PT-2014-07 · Solar-Log · Solar-Log

Published 2014-04-11 · Updated 2014-04-11

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Solar-log (affected versions not specified)

Description The issue is related to a lack of password protection for CGI scripts used for backup and restoration of data and system configuration in the Solar-log photoelectric system software. This allows a remote attacker to gain unauthorized access to confidential information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

BDU:2014-00402

Affected Products

Solar-Log

References · 5

• https://bdu.fstec.ru/vul/2014-00402 · Security Note
• http://securitylab.ru/lab/PT-2014-07 · Note
• http://securityfocus.com/bid/67455 · Note
• http://osvdb.org/show/osvdb/106640 · Note
• http://secunia.com/advisories/58396 · Note