Vulnerabilities > CVE-2022-47767 - Unspecified vulnerability in Solar-Log products

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

solar-log

critical

NVD

Published: 2023-01-26

Updated: 2023-02-06

Summary

A backdoor in Solar-Log Gateway products allows remote access via web panel gaining super administration privileges to the attacker. This affects all Solar-Log devices that use firmware version v4.2.7 up to v5.1.1 (included).

Vulnerable Configurations

Part	Description	Count
OS	Solar-Log Solar LOG Solar LOG 250 Firmware 2.8.4-56 Solar LOG Solar LOG 250 Firmware 3.5.2-85 Solar LOG Solar LOG 250 Firmware * Solar LOG Solar LOG 300 Firmware 2.8.4-56 Solar LOG Solar LOG 300 Firmware 3.5.2-85 Solar LOG Solar LOG 300 Firmware * Solar LOG Solar LOG 500 Firmware 2.8.4-56 Solar LOG Solar LOG 500 Firmware 3.5.2-85 Solar LOG Solar LOG 500 Firmware * Solar LOG Solar LOG 800E Firmware 2.8.4-56 Solar LOG Solar LOG 800E Firmware 3.5.2-85 Solar LOG Solar LOG 800E Firmware * Solar LOG Solar LOG 1000 Firmware 2.8.4-56 Solar LOG Solar LOG 1000 Firmware 3.5.2-85 Solar LOG Solar LOG 1000 Firmware * Solar LOG Solar LOG 1000 Pm+ Firmware 2.8.4-56 Solar LOG Solar LOG 1000 Pm+ Firmware 3.5.2-85 Solar LOG Solar LOG 1000 Pm+ Firmware * Solar LOG Solar LOG 1200 Firmware 2.8.4-56 Solar LOG Solar LOG 1200 Firmware 3.5.2-85 Solar LOG Solar LOG 1200 Firmware * Solar LOG Solar LOG 2000 Firmware 2.8.4-56 Solar LOG Solar LOG 2000 Firmware 3.5.2-85 Solar LOG Solar LOG 2000 Firmware * Solar LOG Solar LOG 50 Firmware *	25
Hardware	Solar-Log Solar LOG Solar LOG 250 - Solar LOG Solar LOG 300 - Solar LOG Solar LOG 500 - Solar LOG Solar LOG 800E - Solar LOG Solar LOG 1000 - Solar LOG Solar LOG 1000 Pm+ - Solar LOG Solar LOG 1200 - Solar LOG Solar LOG 2000 - Solar LOG Solar LOG 50 -	9

Summary

Vulnerable Configurations

References