Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability in Solar-Log Base 15 Firmware 6.0.1 Build 161, and possibly other Solar-Log Base products, allows an attacker to escalate their privileges by exploiting a stored cross-site scripting (XSS) vulnerability in the switch group function under /#ilang=DE&b=c_smartenergy_swgroups in the web portal. The vulnerability can be exploited to gain the rights of an installer or PM, which can then be used to gain administrative access to the web portal and execute further attacks. NOTE: The vendor states that this vulnerability has been fixed with 3.0.0-60 11.10.2013 for SL 200, 500, 1000 / not existing for SL 250, 300, 1200, 2000, SL 50 Gateway, SL Base.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Solar-Log GmbH Base 跨站脚本漏洞
Vulnerability Description
Solar-Log GmbH是德国Solar-Log公司的一个用于监控光伏电站的数据记录器。 Solar-Log GmbH Base 15 6.0.1 Build 161固件版本存在跨站脚本漏洞，该漏洞源于允许攻击者利用 Web 门户中的switch group函数提升其权限。
CVSS Information
N/A
Vulnerability Type
N/A