FlagThis
← Back to CVE List
Vulnerability Intelligence Report

CVE-2023-29919

SolarView Compact <= 6.0 is vulnerable to Insecure Permissions. Any file on the server can be read or modified because texteditor.php is not restricted.

Nuclei Template
CVSS Base Score
9.8
CRITICAL
Exploitability:3.9
Impact Score:5.9
EPSS Probability:60.22%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—

Weaknesses (CWE)

CWE-276 ↗CWE-276 Incorrect Default Permissions

Affected Products & Versions

Vendor Product Affected Versions
contec solarview_compact_firmware all
contec solarview_compact all

References & Technical Advisories

NVD Listing ↗ MITRE Listing ↗ GitHub Advisory ↗
No reference links found.

Threat Intelligence Signals

Nuclei Template
SCANNER AVAILABLE
EPSS Score
60.221%
GitHub Advisory
GHSA-frrm-2grp-jmjh ↗

Identity & Timeline

StatusPUBLISHED
Assigning AuthorityMITRE Corporation · N/A · USA
Reserved2023-04-07T00:00:00
Published2023-05-23T00:00:00
Last Updated2025-01-17T18:26:54

Related Intelligence

Related CVEs
CVE-2023-46509 CVSS 9.8 — An issue in Contec SolarView Compact v.6.0 and before allows an attack…
CVE-2023-23333 CVSS 9.8 — There is a command injection vulnerability in SolarView Compact throug…
CVE-2022-44354 CVSS 9.8 — SolarView Compact 4.0 and 5.0 is vulnerable to Unrestricted File Uploa…
CVE-2022-40881 CVSS 9.8 — SolarView Compact 6.00 was discovered to contain a command injection v…
CVE-2023-40924 CVSS 7.5 — SolarView Compact < 6.00 is vulnerable to Directory Traversal.
LINK COPIED TO CLIPBOARD