---
cve: "CVE-2012-5864"
severity: "CRITICAL"
cvss: 9.4
epss: "4.9%"
vendor: "Sinapsi"
kev: false
exploited: false
published: "2012-11-23 12:09:58"
tags: [cve, security, critical]
source: tsecurity.de CVE-Dossier
exported: "2026-09-14T07:15:02+02:00"
---

# CVE-2012-5864

> 9.4 CRITICAL · 🧪 PoC

## Beschreibung

These Sinapsi devices 
do not check if users that visit pages within the device have properly 
authenticated. By directly visiting the pages within the device, 
attackers can gain unauthorized access with administrative privileges.

## CVSS-Vektor

```
AV:N/AC:L/Au:N/C:C/I:C/A:N
```

## Exploit-Evidenz

- [EDB-21273 — Ezylog Photovoltaic Management Server - Multiple Vulnerabilities](https://www.exploit-db.com/exploits/21273)

## Referenzen

- <http://www.exploit-db.com/exploits/21273/>
- <http://archives.neohapsis.com/archives/bugtraq/2012-09/0045.html>
- <https://exchange.xforce.ibmcloud.com/vulnerabilities/80200>
- <https://www.cisa.gov/news-events/ics-advisories/icsa-12-325-01>
- <http://www.sinapsitech.it/default.asp?active_page_id=78&news_id=88>
- <http://www.us-cert.gov/control_systems/pdf/ICSA-12-325-01.pdf>
- <https://exchange.xforce.ibmcloud.com/vulnerabilities/80203>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2012-5864) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_