A vulnerability classified as problematic was found in Solare Solar-Log 2.8.4-56/3.5.2-85. Affected by this vulnerability is an unknown functionality of the component Config Handler. The manipulation leads to information disclosure. The CWE definition for the vulnerability is CWE-200. The weakness was shared 03/22/2017 by T. Weber with SEC Consult Vulnerability Lab as SEC Consult SA-20170322-0 :: Multiple vulnerabilities in Solare Datensysteme Solar-Log devices as Mailinglist Post (Full-Disclosure). The advisory is shared at seclists.org. The public disclosure was coordinated with the vendor. This vulnerability is known as CVE-2017-20019. The attack can be launched remotely. There are no technical details available. There is no exploit available. The price for an exploit might be around USD $0-$5k at the moment. MITRE ATT&CK project uses the attack technique T1592 for this issue. It is declared as not defined. We expect the 0-day to have been worth approximately $0-$5k. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component. A possible mitigation has been published even before and not after the disclosure of the vulnerability.

60 more entries are not shown