Approved changes feed: RSS · Atom

cpe:2.3:h:solar-log:solar-log_250:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorSolar Log (6b531649-878c-5079-bc24-35c36a36104d)
ProductSolar Log 250 (52ac5658-8e5f-5e1a-97ba-f787877a2bee)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-47767 not_vulnerable 2026-06-03 14:48:27.819430 Details available
A backdoor in Solar-Log Gateway products allows remote access via web panel gaining super administration privileges to the attacker. This affects Solar-Log devices that use firmware version v4.2.7 up to v5.1.1 (included). This does not exist in SL 200, 500, 1000 / fixed in 4.2.8 for SL 250, 300, 1200, 2000, SL 50 Gateway / fixed in 5.1.2 / 6.0.0 for SL Base.
Published: 2023-01-25T00:00:00.000Z
Updated: 2025-04-01T15:09:14.434Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-20025 not_vulnerable 2026-06-03 14:37:06.157054 Solare Solar-Log Flash Memory privileges management
HIGH (7.3)
A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Flash Memory. The manipulation leads to privilege escalation. The attack can be launched remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component.
Published: 2022-06-09T22:36:00.000Z
Updated: 2025-04-15T14:29:19.711Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-20024 not_vulnerable 2026-06-03 14:37:06.156061 Solare Solar-Log denial of service
MEDIUM (5.3)
A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85. It has been classified as problematic. Affected is an unknown function. The manipulation leads to denial of service. It is possible to launch the attack remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component.
Published: 2022-06-09T22:35:58.000Z
Updated: 2025-04-15T14:29:30.573Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-20023 not_vulnerable 2026-06-03 14:37:06.155037 Solare Solar-Log Network Config privileges management
MEDIUM (6.3)
A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85 and classified as critical. This issue affects some unknown processing of the component Network Config. The manipulation leads to privilege escalation. The attack may be initiated remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component.
Published: 2022-06-09T22:35:57.000Z
Updated: 2025-04-15T14:29:43.295Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-20022 not_vulnerable 2026-06-03 14:37:06.153940 Solare Solar-Log information disclosure
A vulnerability has been found in Solare Solar-Log 2.8.4-56/3.5.2-85 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to information disclosure. The attack can be initiated remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component.
Published: 2022-06-09T22:35:55.000Z
Updated: 2025-04-15T13:06:28.566Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-20021 not_vulnerable 2026-06-03 14:37:06.152909 Solare Solar-Log File Upload privileges management
MEDIUM (6.5)
A vulnerability, which was classified as critical, was found in Solare Solar-Log 2.8.4-56/3.5.2-85. This affects an unknown part of the component File Upload. The manipulation leads to privilege escalation. It is possible to initiate the attack remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component.
Published: 2022-06-09T22:35:54.000Z
Updated: 2025-04-15T14:29:58.849Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-20020 not_vulnerable 2026-06-03 14:37:06.151837 Solare Solar-Log cross-site request forgery
MEDIUM (5.3)
A vulnerability, which was classified as problematic, has been found in Solare Solar-Log 2.8.4-56/3.5.2-85. Affected by this issue is some unknown functionality. The manipulation leads to cross site request forgery. The attack may be launched remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component.
Published: 2022-06-09T22:35:52.000Z
Updated: 2025-04-15T14:30:16.399Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-20019 not_vulnerable 2026-06-03 14:37:06.140379 Solare Solar-Log Config information disclosure
MEDIUM (4.3)
A vulnerability classified as problematic was found in Solare Solar-Log 2.8.4-56/3.5.2-85. Affected by this vulnerability is an unknown functionality of the component Config Handler. The manipulation leads to information disclosure. The attack can be launched remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component.
Published: 2022-06-09T22:35:51.000Z
Updated: 2025-04-15T14:30:27.726Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.