Multiple vulnerabilities in Ezylog photovoltaic management
server  Multiple vulnerabilities in Ezylog photovoltaic
management server  Title: Multiple vulnerabilities in Ezylog
photovoltaic management server Discovery date: 27/08/2012
Release date: 11/09/2012 Credits: Roberto Paleari
(roberto@xxxxxxxxxxx, @rpaleari) Ivan Speziale
(ivan.speziale@xxxxxxxx)  The vulnerabilities discussed in this
advisory affect the Schneider Electric Ezylog photovoltaic SCADA
management server. However, the same management server is shared
among different photovoltaic SCADA products from several
manufacturers, with few customization. Thus, the same
vulnerabilities should also apply to other products as well. All
the firmware versions we analyzed have been found to be affected
by these issues.  The software running on the affected devices
is vulnerable to multiple security issues, that allow
unauthenticated remote attackers to gain administrative access
and execute arbitrary commands. The details of the
vulnerabilities we found ar