• Language chooser
    • USA (English)
    • France (Français)

virus logo Outbreak Alert

SolarView Compact Command Injection Vulnerability

Released: Jul 06, 2023

Updated: Jul 06, 2023

Download PDF »

SolarView Compact Command Injection

High Severity

IoT Platform

Vulnerability, OT/ICS Type

Industrial Control Systems hardware vulnerability exploited in the wild

FortiGuard Labs observed a huge spike in attack attempts relating to a command injection vulnerability in SolarView Compact (Solar power generation monitoring system) with upto more than 18,000+ unique IPS detections in the month of July 2023. The exploit works due to the vulnerability in SolarView Compact confi_mail.php component, which fails to adequately sanitize the user-supplied input data, leading to command injection. Learn More »

Common Vulnerabilities and Exposures

CVE-2022-40881
CVE-2022-29303

Background

SolarView Compact is a part of Solar energy monitoring solutions offered by CONTEC and SolarView Compact specifically monitors and visualizes small to medium-scale solar power generation and storage. According to the vendor website, particularly in the field of solar power generation, SolarView brand solutions are introduced at more than 30,000 power stations. If the SolarView Compact hardware is a part of a solar power generation site, the attacker may be able to exploit and affect loss of productivity and revenue and could also use it as a network pivot to attack other ICS resources.

Threat Radar Overall Score:
CVSS Rating 9.0
FortiRecon Score 90/100
Known Exploited Yes
Exploit Prediction Score 96.47%
FortiGuard Telemetry 8477

Latest Development

Recent news and incidents related to cybersecurity threats encompassing various events such as data breaches, cyber-attacks, security incidents, and vulnerabilities discovered.


13 Dec, 2022: FortGuard Labs released IPS signature to detect and block attack attempts leveraging SolarView Compact Command Injection Vulnerability. (CVE-2022-40881, CVE-2022-29303)

23 March, 2023: FortiGuard Labs created an IPS signature to detect a different SolarView Compact Command Injection Vulnerability (CVE-2023-23333), however we do not see signs of it being exploited in the wild as of yet.


FortiGuard customers remain protected by the IPS signatures for CVE-2022-40881, CVE-2022-29303, CVE-2023-23333, however we recommend users to apply review patches and upgrade SolarView Compact devices if available and make sure the devices are protected and behind the IPS systems to mitigate any risks completely.

It is reported that all the vulnerabilties mentioned are fixed in SolarView Compact v8.0 and above.

FortiGuard Cybersecurity Framework

Mitigate security threats and vulnerabilities by leveraging the range of FortiGuard Services.


PROTECT

  • AV

  • AV (Pre-filter)

  • Behavior Detection

  • IPS

DETECT

  • IOC

  • Outbreak Detection

RESPOND

  • Assisted Response Services

  • Automated Response

RECOVER

  • NOC/SOC Training

  • End-User Training

IDENTIFY

  • Attack Surface Hardening

Threat Intelligence

Information gathered from analyzing ongoing cybersecurity events including threat actors, their tactics, techniques, and procedures (TTPs), indicators of compromise (IOCs), malware and related vulnerabilities.


Loading ...

References

Sources of information in support and relation to this Outbreak and vendor.


Bleeping Computer

Learn More »
Dark Reading

Learn More »
About FortiGuard Outbreak Alerts

Learn More »