PT-2023-15480 · Unknown+5 · Solar-Log Gateway+6

Andrea D’Ubaldo + 1 · Published 2023-01-25 · Updated 2024-11-11 · CVE-2022-47767

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Solar-Log Gateway products versions v4.2.7 through v5.1.1

Description A backdoor in Solar-Log Gateway products allows remote access via the web panel, gaining super administration privileges to the attacker.

Recommendations For Solar-Log devices SL 250, 300, 1200, 2000, SL 50 Gateway, update to firmware version 4.2.8 or later. For SL Base, update to firmware version 5.1.2 or 6.0.0 or later.

Exploit

Fix

Hidden Functionality

Weakness Enumeration

CWE-912

Related Identifiers

CVE-2022-47767

Affected Products

Sl 1200

Sl 2000

Sl 250

Sl 300

Sl 50 Gateway

Sl Base

Solar-Log Gateway

References · 5

• 🔥 https://swascan.com/security-advisory-solar-log · Exploit
• https://osv.dev/vulnerability/CVE-2022-47767 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-47767 · Security Note
• https://solar-log.com/en/support/firmware-database-1 · Vendor Advisory
• https://t.me/cvenotify/101315 · Telegram Post