Vulnerabilities > CVE-2017-20019 - Unspecified vulnerability in Solar-Log products

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

solar-log

NVD

Published: 2022-06-09

Updated: 2024-11-21

Summary

A vulnerability classified as problematic was found in Solare Solar-Log 2.8.4-56/3.5.2-85. Affected by this vulnerability is an unknown functionality of the component Config Handler. The manipulation leads to information disclosure. The attack can be launched remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component.

Vulnerable Configurations

Part	Description	Count
OS	Solar-Log Solar LOG Solar LOG 250 Firmware 2.8.4-56 Solar LOG Solar LOG 250 Firmware 3.5.2-85 Solar LOG Solar LOG 300 Firmware 2.8.4-56 Solar LOG Solar LOG 300 Firmware 3.5.2-85 Solar LOG Solar LOG 500 Firmware 2.8.4-56 Solar LOG Solar LOG 500 Firmware 3.5.2-85 Solar LOG Solar LOG 800E Firmware 2.8.4-56 Solar LOG Solar LOG 800E Firmware 3.5.2-85 Solar LOG Solar LOG 1000 Firmware 2.8.4-56 Solar LOG Solar LOG 1000 Firmware 3.5.2-85 Solar LOG Solar LOG 1000 Pm+ Firmware 2.8.4-56 Solar LOG Solar LOG 1000 Pm+ Firmware 3.5.2-85 Solar LOG Solar LOG 1200 Firmware 2.8.4-56 Solar LOG Solar LOG 1200 Firmware 3.5.2-85 Solar LOG Solar LOG 2000 Firmware 2.8.4-56 Solar LOG Solar LOG 2000 Firmware 3.5.2-85	16
Hardware	Solar-Log Solar LOG Solar LOG 250 - Solar LOG Solar LOG 300 - Solar LOG Solar LOG 500 - Solar LOG Solar LOG 800E - Solar LOG Solar LOG 1000 - Solar LOG Solar LOG 1000 Pm+ - Solar LOG Solar LOG 1200 - Solar LOG Solar LOG 2000 -	8

Summary

Vulnerable Configurations

References