CVE-2021-34544

Severity CVSS v4.0:
Pending analysis
Type:
CWE-312 Cleartext Storage of Sensitive Information
Publication date:
07/12/2021
Last modified:
11/11/2024

Description

An issue was discovered in Solar-Log 500 before 2.8.2 Build 52 23.04.2013. In /export.html, email.html, and sms.html, cleartext passwords are stored. This may allow sensitive information to be read by someone with access to the device. Fixed with 3.0.0-60 11.10.2013 for SL 200, 500, 1000 / not existing for SL 250, 300, 1200, 2000, SL 50 Gateway, SL Base.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:bkw:solar-log_500_firmware:*:*:*:*:*:*:*:* 2.8.1 (including)
cpe:2.3:o:bkw:solar-log_500_firmware:2.8.2:build_50:*:*:*:*:*:*
cpe:2.3:h:bkw:solar-log_500:-:*:*:*:*:*:*:*