Contec Solarview Compact Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Contec Solarview Compact Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2023-23333 — CVSS 9.8 (critical): There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal…
• CVE-2022-44354 — CVSS 9.8 (critical): SolarView Compact 4.0 and 5.0 is vulnerable to Unrestricted File Upload via a crafted php file.
• CVE-2022-40881 — CVSS 9.8 (critical): SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php
• CVE-2023-46509 — CVSS 9.8 (critical): An issue in Contec SolarView Compact v.6.0 and before allows an attacker to execute arbitrary code via the texteditor.php component.
• CVE-2023-29919 — CVSS 9.1 (critical): SolarView Compact <= 6.0 is vulnerable to Insecure Permissions. Any file on the server can be read or modified because texteditor.php is…
• CVE-2023-40924 — CVSS 7.5 (high): SolarView Compact < 6.00 is vulnerable to Directory Traversal.
• CVE-2022-44355 — CVSS 6.1 (medium): SolarView Compact 7.0 is vulnerable to Cross-site Scripting (XSS) via /network_test.php.