CVE-2012-5861CWE-89

Sinapsi eSolar SQL Injection

High · published November 23, 2012

CVSS v2.0
7.8
EPSS
4%
Percentile
90.9
In the wild
Unconfirmed
What it is

These Sinapsi devices do not check the validity of the data before

executing queries. By accessing the SQL table of certain pages that do

not require authentication within the device, attackers can leak

information from the device. This could allow the attacker to compromise

confidentiality.

The record
Technical detail
CVSS v2.0
7.8 · HIGH
Vector
AV:N/AC:L/Au:N/C:C/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.04239 · 90.9th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2012-11-23T11:00Z
EPSS history
Timeline
  • 23 NOV 11:00Z
    Sinapsi eSolar SQL Injection
    cvelistv5