Vulnerabilities > Solar LOG > 2000 PM Firmware > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-02-02 CVE-2023-46344 Cross-site Scripting vulnerability in Solar-Log 2000 Pm+ Firmware 15.10.2019
A vulnerability in Solar-Log Base 15 Firmware 6.0.1 Build 161, and possibly other Solar-Log Base products, allows an attacker to escalate their privileges by exploiting a stored cross-site scripting (XSS) vulnerability in the switch group function under /#ilang=DE&b=c_smartenergy_swgroups in the web portal.
network
low complexity
solar-log CWE-79
5.4