Description
These Sinapsi devices store hard-coded passwords in the PHP file of the device. By using the hard-coded passwords in the device, attackers can log into the device with administrative privileges. This could allow the attacker to have unauthorized access.
Exploits (1)
References (6)
Scores
EPSS
0.1826
EPSS Percentile
95.2%
Details
CWE
CWE-259
CWE-310
Status
published
Products (7)
Sinapsi/eSolar
< 2.0.2870_xxx_2.2.12
Sinapsi/eSolar DUO
< 2.0.2870_xxx_2.2.12
Sinapsi/eSolar Light
< 2.0.2870_xxx_2.2.12
sinapsitech/esolar_duo_photovoltaic_system_monitor
sinapsitech/esolar_light_photovoltaic_system_monitor
sinapsitech/esolar_photovoltaic_system_monitor
sinapsitech/sinapsi_firmware
< 2.0.2870
Published
Nov 23, 2012
Tracked Since
Feb 18, 2026