Approved changes feed: RSS · Atom

cpe:2.3:o:solar-log:solar-log_1000_pm\+_firmware:2.8.4-56:*:*:*:*:*:*:*

part: o version: 2.8.4-56 update: *

VendorSolar Log (6b531649-878c-5079-bc24-35c36a36104d)
ProductSolar Log 1000 Pm+ Firmware (62fe9fed-87b8-5f06-b8a4-7c67268dc964)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-20025 vulnerable 2026-06-03 14:37:06.157281 Solare Solar-Log Flash Memory privileges management
HIGH (7.3)
A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Flash Memory. The manipulation leads to privilege escalation. The attack can be launched remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component.
Published: 2022-06-09T22:36:00.000Z
Updated: 2025-04-15T14:29:19.711Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-20024 vulnerable 2026-06-03 14:37:06.156273 Solare Solar-Log denial of service
MEDIUM (5.3)
A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85. It has been classified as problematic. Affected is an unknown function. The manipulation leads to denial of service. It is possible to launch the attack remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component.
Published: 2022-06-09T22:35:58.000Z
Updated: 2025-04-15T14:29:30.573Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-20023 vulnerable 2026-06-03 14:37:06.155254 Solare Solar-Log Network Config privileges management
MEDIUM (6.3)
A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85 and classified as critical. This issue affects some unknown processing of the component Network Config. The manipulation leads to privilege escalation. The attack may be initiated remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component.
Published: 2022-06-09T22:35:57.000Z
Updated: 2025-04-15T14:29:43.295Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-20022 vulnerable 2026-06-03 14:37:06.154148 Solare Solar-Log information disclosure
A vulnerability has been found in Solare Solar-Log 2.8.4-56/3.5.2-85 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to information disclosure. The attack can be initiated remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component.
Published: 2022-06-09T22:35:55.000Z
Updated: 2025-04-15T13:06:28.566Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-20021 vulnerable 2026-06-03 14:37:06.153121 Solare Solar-Log File Upload privileges management
MEDIUM (6.5)
A vulnerability, which was classified as critical, was found in Solare Solar-Log 2.8.4-56/3.5.2-85. This affects an unknown part of the component File Upload. The manipulation leads to privilege escalation. It is possible to initiate the attack remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component.
Published: 2022-06-09T22:35:54.000Z
Updated: 2025-04-15T14:29:58.849Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-20020 vulnerable 2026-06-03 14:37:06.152062 Solare Solar-Log cross-site request forgery
MEDIUM (5.3)
A vulnerability, which was classified as problematic, has been found in Solare Solar-Log 2.8.4-56/3.5.2-85. Affected by this issue is some unknown functionality. The manipulation leads to cross site request forgery. The attack may be launched remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component.
Published: 2022-06-09T22:35:52.000Z
Updated: 2025-04-15T14:30:16.399Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-20019 vulnerable 2026-06-03 14:37:06.146901 Solare Solar-Log Config information disclosure
MEDIUM (4.3)
A vulnerability classified as problematic was found in Solare Solar-Log 2.8.4-56/3.5.2-85. Affected by this vulnerability is an unknown functionality of the component Config Handler. The manipulation leads to information disclosure. The attack can be launched remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component.
Published: 2022-06-09T22:35:51.000Z
Updated: 2025-04-15T14:30:27.726Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.