CVE-2023-46344
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
A vulnerability in Solar-Log Base 15 Firmware 6.0.1 Build 161 allows privilege escalation via stored XSS in the switch group function. An attacker can gain installer or PM rights and then administrative access to the web portal.
Risk Assessment
The risk involves unauthorized control over the Solar-Log device, potentially leading to further attacks on the organization's energy infrastructure.
Recommendation
Immediately update Solar-Log Base firmware to version 3.0.0-60 from 11.10.2013 or later, which fixes this vulnerability.
Original NVD description (English source)
A vulnerability in Solar-Log Base 15 Firmware 6.0.1 Build 161, and possibly other Solar-Log Base products, allows an attacker to escalate their privileges by exploiting a stored cross-site scripting (XSS) vulnerability in the switch group function under /#ilang=DE&b=c_smartenergy_swgroups in the web portal. The vulnerability can be exploited to gain the rights of an installer or PM, which can then be used to gain administrative access to the web portal and execute further attacks. NOTE: The vendor states that this vulnerability has been fixed with 3.0.0-60 11.10.2013 for SL 200, 500, 1000 / not existing for SL 250, 300, 1200, 2000, SL 50 Gateway, SL Base.