CVE-2023-29919

CRITICAL EXPLOITED NUCLEI

Contec Solarview Compact Firmware - Incorrect Default Permissions

Title source: rule

Description

SolarView Compact <= 6.0 is vulnerable to Insecure Permissions. Any file on the server can be read or modified because texteditor.php is not restricted.

Exploits (1)

nomisec WRITEUP

by xiaosed · infoleak

https://github.com/xiaosed/CVE-2023-29919

View Code ZIP pw:eip

Nuclei Templates (1)

SolarView Compact <= 6.00 - Local File Inclusion

CRITICALVERIFIEDby For3stCo1d

Shodan: http.html:"SolarView Compact" || cpe:"cpe:2.3:h:contec:solarview_compact"

References (2)

[Exploit, Third Party Advisory] https://github.com/xiaosed/CVE-2023-29919/

[Not Applicable] https://www.solarview.io/

Scores

CVSS v3 9.1

EPSS 0.9185

EPSS Percentile 99.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Details

VulnCheck KEV 2023-11-25

CWE

CWE-276

Status published

Products (1)

contec/solarview_compact_firmware < 6.0

Published May 23, 2023

Tracked Since Feb 18, 2026