Unscored CVE-2021-20659 EUVD-2021-8077GHSA-gx3m-2wcq-p82x

SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to upload arbitrary files via unspecified vectors. If the …

Published Feb 24, 2021 · Updated Aug 3, 2024 · Assigned by jpcert

Vendor: Contec Product: SolarView Compact

Description

SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to upload arbitrary files via unspecified vectors. If the file is PHP script, an attacker may execute arbitrary code.

Affected products

Vendor	Product	Affected	Fixed
Contec	SolarView Compact	SV-CPT-MC310 prior to Ver.6.5	—

References

https://www.contec.com/jp/api/downloadlogger?download=https://www.contec.com/jp/-/media/contec/jp/support/security-info/contec_security_solarview_210216.pdf
https://www.contec.com/jp/download/contract/contract2/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e&downloaditemid=fa248fba-8901-4d9e-8212-b139f2defbdf
https://jvn.jp/en/jp/JVN37417423/index.html