Solarview Compact Firmware vulnerabilities

2 known vulnerabilities in Solarview Compact Firmware from Contec. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Solarview Compact Firmware: Incorrect Default Permissions

  CVE-2023-29919May 23, 2023ContecEPSS 60.2%

  SolarView Compact <= 6.0 is vulnerable to Insecure Permissions. Any file on the server can be read or modified because texteditor.php is not restricted.

• 9.8 Critical severity

  Solarview Compact Firmware: Improper Neutralization of Special Elements used in a Command

  CVE-2023-23333Feb 6, 2023ContecEPSS 99.3%

  There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restrictions through downloader.php.