CVE-2012-5861
These Sinapsi devices do not check the validity of the data before
executing queries. By accessing the SQL table of certain pages that do
not require authentication within the device, attackers can leak
information from the device. This could allow the attacker to compromise
confidentiality.
- EPSS
- 4.2% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
- CWE
- CWE-89
- Published
- Modified
- Record from
- the NVD, synced
Affected
- sinapsitech:esolar_duo_photovoltaic_system_monitor
- sinapsitech:esolar_light_photovoltaic_system_monitor
- sinapsitech:esolar_photovoltaic_system_monitor
- sinapsitech:sinapsi_firmware