CVE-2023-27518

HIGH

Contec Sv-cpt-mc310f Firmware < 8.10 - Buffer Overflow

Title source: rule

Description

Buffer overflow vulnerability in the multiple setting pages of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows a remote authenticated attacker to execute arbitrary code.

References (3)

Core 3

Core References

Third Party Advisory

https://jvn.jp/en/vu/JVNVU92106300/

Vendor Advisory

https://www.contec.com/jp/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_solarview_230508.pdf

Vendor Advisory

https://www.contec.com/jp/download/donwload-list/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e#firmware

Scores

CVSS v3 8.8

EPSS 0.0258

EPSS Percentile 85.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-120

Status published

Products (2)

contec/sv-cpt-mc310_firmware < 8.10

contec/sv-cpt-mc310f_firmware < 8.10

Published May 23, 2023

Tracked Since Feb 18, 2026