PT-2015-6354 · Sinapsi · Sinapsi Esolar Light

Maxim Rupp · Published 2015-06-13 · Updated 2016-12-06 · CVE-2015-3949

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sinapsi eSolar Light versions prior to 2.0.3970 schsl 2.2.85

Description The issue allows attackers to discover cleartext passwords by reading the HTML source code of the "mail-configuration" page.

Recommendations For versions prior to 2.0.3970 schsl 2.2.85, update the firmware to version 2.0.3970 schsl 2.2.85 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2015-3949

Affected Products

Sinapsi Esolar Light

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-3949 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSA-15-160-02 · Note
• http://securityfocus.com/bid/75100 · Note