OSVDB ID: 86022 Title: Sinapsi eSolar Light Photovoltaic System Monitor login.php Multiple Default Hardcoded Passwords |
Info |
|
|
Dates |
||||
|
|
Description |
By default, Sinapsi eSolar Light Photovoltaic System Monitor installs with a default password. The program authenticates users who provide the password of 36e44c9b64 (and 1-2 other unspecified passwords), which is publicly known and documented, regardless of the username they provide. This allows attackers to trivially access the program or system and gain privileged access. Users are not able to change this password. |
Classification |
Location:
Remote / Network Access
Attack Type: Authentication Management Impact: Loss of Integrity Solution: Solution Unknown Exploit: Exploit Public Disclosure: No Vendor Response OSVDB: SCADA |
Solution |
OSVDB is not aware of a solution for this vulnerability. |
Products |
|
Credit |
Unknown or Incomplete |