Unpatched SolarView Systems Vulnerable to Exploits
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-29303 | Unauthenticated Command Injection in Contec SolarView Compact | 9.8 | 98% | KEVPoC ×2 | KEV |
| CVE-2022-44354 | SolarView Compact 4.0 and 5.0 is vulnerable to Unrestricted File Upload via a crafted php file | 9.8 | 2% | PoC | |
| CVE-2023-23333 | There: 00, attackers can execute commands by bypassing internal restrictions through downloader.php | 9.8 | 99% | PoC |
From the original article
2 min read at infosecurity-magazine.com
Security researchers at VulnCheck have highlighted the exploitation of vulnerabilities in the SolarView Series, an industrial control systems (ICS) hardware widely used for monitoring solar power generation and storage. These findings come on the heels of Palo Alto Networks Unit 42's publication on June 22 2023, which revealed a Mirai botnet variant leveraging various new vulnerabilities.
By Alessandro Mascellino · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.