PT-2021-14117
CVE-2021-20657
·
Published
2021-02-24
·
Updated
2022-07-12
Description by
CVSS 2.0
5.5
MediumMetricsAV:N/AC:L/Au:S/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions:
SolarView Compact SV-CPT-MC310 versions prior to Ver.6.5
Description:
The issue allows an authenticated attacker to obtain and/or alter the setting information without the access privilege via unspecified vectors. This is due to an improper access control vulnerability.
Recommendations:
For SolarView Compact SV-CPT-MC310 versions prior to Ver.6.5, update to Ver.6.5 or later to resolve the issue. As a temporary workaround, consider restricting access to setting information to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾