CVE:CVE-2022-47767
CNNVD:CNNVD-202301-2040
Solar Log Gateway是Solar Log公司的一个住宅监控系统。
Solar Log Gateway 固件v4.2.7至v5.1.1版本存在安全漏洞，该漏洞源于其web仪表面板允许远程攻击者通过后门以超级管理员权限登录。
solution:Upgrade solar-log solar-log_250_firmware to a higher version than 4.2.8_117,5.1.2_156,and avoid the version (,4.2.8_117),[5.0.0,5.1.2_156); Upgrade solar-log solar-log_300_firmware to a higher version than 4.2.8_117,5.1.2_156,and avoid the version (,4.2.8_117),[5.0.0,5.1.2_156); Upgrade solar-log solar-log_500_firmware to a higher version than 4.2.8_117,5.1.2_156,and avoid the version (,4.2.8_117),[5.0.0,5.1.2_156); Upgrade solar-log solar-log_800e_firmware to a higher version than 4.2.8_117,5.1.2_156,and avoid the version (,4.2.8_117),[5.0.0,5.1.2_156); Upgrade solar-log solar-log_1000_firmware to a higher version than 4.2.8_117,5.1.2_156,and avoid the version (,4.2.8_117),[5.0.0,5.1.2_156); Upgrade solar-log solar-log_1000_pm+_firmware to a higher version than 4.2.8_117,5.1.2_156,and avoid the version (,4.2.8_117),[5.0.0,5.1.2_156); Upgrade solar-log solar-log_1200_firmware to a higher version than 4.2.8_117,5.1.2_156,and avoid the version (,4.2.8_117),[5.0.0,5.1.2_156); Upgrade solar-log solar-log_2000_firmware to a higher version than 4.2.8_117,5.1.2_156,and avoid the version (,4.2.8_117),[5.0.0,5.1.2_156); Upgrade solar-log solar-log_50_firmware to a higher version than 4.2.8_117,5.1.2_156,and avoid the version (,4.2.8_117),[5.0.0,5.1.2_156)