CVE-2017-9862 in Solar Systeminformation

Résumé

par MITRE

An issue was discovered in SMA Solar Technology products. When signed into Sunny Explorer with a wrong password, it is possible to create a debug report, disclosing information regarding the application and allowing the attacker to create and save a .txt file with contents to his liking. An attacker may use this for information disclosure, or to write a file to normally unavailable locations on the local system.

Be aware that VulDB is the high quality source for vulnerability data.

Réserver

24/06/2017

Divulgation

05/08/2017

Modérer

accepté

Entrée

VDB-104876

CPE

prêt

EPSS

0.01724

KEV

non

Activités

très faible

Sources

Do you know our Splunk app?

Download it now for free!