CVE-2012-5863

CVE-2012-5863: Sinapsi eSolar OS Command Injection

Vendor Sinapsi
Product eSolar
Weakness CWE-78
Published November 23, 2012
Last update July 8, 2025

CVSS base score

What the vulnerability does

01Description

These Sinapsi devices do not check for special elements in commands sent to the system. By accessing certain pages with administrative privileges that do not require authentication within the device, attackers can execute arbitrary, unexpected, or dangerous commands directly onto the operating system.

Key dates

02Disclosure timeline

November 23, 2012 CVE published
July 8, 2025 Record updated