High severity7.5NVD Advisory· Published Dec 7, 2021· Updated Jun 17, 2026
CVE-2021-34543
CVE-2021-34543
Description
The web administration server in Solar-Log 500 before 2.8.2 Build 52 does not require authentication, which allows remote attackers to gain administrative privileges by connecting to the server. As a result, the attacker can modify configuration files and change the system status. Fixed with 3.0.0-60 11.10.2013 for SL 200, 500, 1000 / not existing for SL 250, 300, 1200, 2000, SL 50 Gateway, SL Base.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4<2.8.2 Build 52+ 1 more
- (no CPE)range: <2.8.2 Build 52
- (no CPE)
cpe:2.3:o:bkw:solar-log_500_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:bkw:solar-log_500_firmware:*:*:*:*:*:*:*:*range: <=2.8.1
- cpe:2.3:o:bkw:solar-log_500_firmware:2.8.2:build_50:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
3- drive.google.com/file/d/1z1TaANlDyX4SOP2vjNzkPQI3nETL9kZM/viewnvdExploitThird Party Advisory
- www.exploit-db.com/exploits/49986nvdExploitThird Party AdvisoryVDB Entry
- www.solar-log.com/en/support/firmware/nvdProductRelease NotesVendor Advisory
News mentions
0No linked articles in our index yet.