Headline

CVE-2021-34543: Firmware for Solar-Log™ Devices

The web administration server in Solar-Log 500 before 2.8.2 Build 52 does not require authentication, which allows remote attackers to gain administrative privileges by connecting to the server. As a result, the attacker can modify configuration files and change the system status.

2 years ago

CVE

Open in Source

#web

Check Firmware Version Automatically

Do you already know about the function "Check firmware version automatically"? By activating this function, the Solar-Log™ device searches daily for new firmware versions on our update server (made possible as of firmware version 3.0.0). If a new version is available, this is displayed accordingly. After confirmation, the firmware can be downloaded. This requires a functioning Internet connection.

Device Group New Devices Solar-Log Base

Device Group New Devices Gateway Solar-Log 50

Device Group New Devices Solar-Log 250, 300, 1200, 1900 and 2000

Device Group Old Devices Solar-Log200, 500 and 1000

Solar-Log WEB EnerestTM - Latest Software-Update

Version

Date

Firmware

Release notes as PDF

Release Notes - Solar-Log™ WEB 3.4.0

06.02.2018

–