Solarview compact firmware

This hub aggregates every CVE we track for Solarview compact firmware, a product in the ics ot iot space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 7 most recently published vulnerabilities affecting Solarview compact firmware.

• CVE-2023-46509An issue in Contec SolarView Compact v.6.0 and before allows an attacker to execute arbitrary code via the texteditor.php component.9.8Oct 27, 2023
• CVE-2023-40924SolarView Compact < 6.00 is vulnerable to Directory Traversal.7.5Sep 8, 2023
• CVE-2023-29919SolarView Compact <= 6.0 is vulnerable to Insecure Permissions. Any file on the server can be read or modified because texteditor.php is not restricted.9.1May 23, 2023
• CVE-2023-23333There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restrictions through downloader.php.9.8Feb 6, 2023
• CVE-2022-44355SolarView Compact 7.0 is vulnerable to Cross-site Scripting (XSS) via /network_test.php.6.1Nov 29, 2022
• CVE-2022-44354SolarView Compact 4.0 and 5.0 is vulnerable to Unrestricted File Upload via a crafted php file.9.8Nov 29, 2022
• CVE-2022-40881SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php9.8Nov 17, 2022