MEDIUM🇬🇧 English

CVE-2017-20021

CVSS 6.5v3.1pub. 2022-06-09upd. 2024-11-21

A vulnerability, which was classified as critical, was found in Solare Solar-Log 2.8.4-56/3.5.2-85. This affects an unknown part of the component File Upload. The manipulation leads to privilege escalation. It is possible to initiate the attack remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

  • Solar Log 1000

    HW
    Solar-Log
    wszystkie wersje

  • Solar Log 1000 Firmware

    OS
    Solar-Log
    2.8.4-563.5.2-85

  • Solar Log 1000 Pm\+

    HW
    Solar-Log
    wszystkie wersje

  • Solar Log 1000 Pm\+ Firmware

    OS
    Solar-Log
    2.8.4-563.5.2-85

  • Solar Log 1200

    HW
    Solar-Log
    wszystkie wersje

  • Solar Log 1200 Firmware

    OS
    Solar-Log
    2.8.4-563.5.2-85

  • Solar Log 2000

    HW
    Solar-Log
    wszystkie wersje

  • Solar Log 2000 Firmware

    OS
    Solar-Log
    2.8.4-563.5.2-85

  • Solar Log 250

    HW
    Solar-Log
    wszystkie wersje

  • Solar Log 250 Firmware

    OS
    Solar-Log
    2.8.4-563.5.2-85

  • Solar Log 300

    HW
    Solar-Log
    wszystkie wersje

  • Solar Log 300 Firmware

    OS
    Solar-Log
    2.8.4-563.5.2-85

  • Solar Log 500

    HW
    Solar-Log
    wszystkie wersje

  • Solar Log 500 Firmware

    OS
    Solar-Log
    2.8.4-563.5.2-85

  • Solar Log 800e

    HW
    Solar-Log
    wszystkie wersje

  • Solar Log 800e Firmware

    OS
    Solar-Log
    2.8.4-563.5.2-85
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
LPE
CWE
Referencje

Powiązane podatności

CVE-2022-47767CRITICAL9.8ten sam produkt

A backdoor in Solar-Log Gateway products allows remote access via web panel gaining super administration privi...

CVE-2017-20022HIGH7.5ten sam produkt

A vulnerability has been found in Solare Solar-Log 2.8.4-56/3.5.2-85 and classified as problematic. This vulne...

CVE-2017-20025HIGH7.3ten sam produkt

A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85. It has been declared as critical. Affected by...

CVE-2017-20024MEDIUM5.3ten sam produkt

A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85. It has been classified as problematic. Affect...

CVE-2017-20023MEDIUM6.3ten sam produkt

A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85 and classified as critical. This issue affects...