critical9.8Known exploitedPublic exploit code
CVE-2022-29303
SolarView Compact Command Injection Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2023-07-13. Federal due date: 2023-08-03.
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SolarView Compact 6.0 - OS Command Injection2022-05-17 · remote · hardware
Impact
SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Contec | Sv-Cpt-Mc310 Firmware | Version 6.00 |
Weakness classification
References
- NVD record
- CVE.org record
- CISA KEV catalog
- http://packetstormsecurity.com/files/167183/SolarView-Compact-6.0-Command-Injection.html
- https://drive.google.com/drive/folders/1tGr-WExbpfvhRg31XCoaZOFLWyt3r60g?usp=sharing
- http://packetstormsecurity.com/files/167183/SolarView-Compact-6.0-Command-Injection.html
- https://drive.google.com/drive/folders/1tGr-WExbpfvhRg31XCoaZOFLWyt3r60g?usp=sharing
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-29303