Actively exploited in the wild
SolarView Compact Command Injection Vulnerability
SolarView - Compact · Listed in the CISA KEV since 2023-07-13. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
CVE-2022-29303
CriticalCVSS 9.8KEVSummary
SolarView Compact version 6.00 was found to contain a command injection vulnerability via conf_mail.php. An attacker can exploit this to execute arbitrary system commands on the device.
Risk Assessment
An attacker can take control of the SolarView Compact device, potentially leading to system integrity and service availability compromise.
Recommendation
Update SolarView Compact to the latest patched version and restrict access to the administrative interface.
Other vulnerabilities in SolarView Compact
See all- CVE-2026-82796Medium
SolarView Compact contains a cross-site scripting vulnerability in Image Management. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
- CVE-2026-82795Medium
SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
- CVE-2026-82794High
SolarView Compact contains an OS command injection vulnerability in Schedule Settings. An attacker who can log in to the product may execute arbitrary OS commands.
Original NVD description (English source)
SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.