What’s Vulnerable › Vulnerabilities

CVE-2015-3949

• Severity: low (CVSS 2.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2015-06-13 · updated 2026-06-17
• Weakness: CWE-200

Description

Sinapsi eSolar Light with firmware before 2.0.3970_schsl_2.2.85 allows attackers to discover cleartext passwords by reading the HTML source code of the mail-configuration page.

Affected products

• Sinapsi Esolar Light Firmware: through 2.0.3970

References

• http://www.securityfocus.com/bid/75100
• https://ics-cert.us-cert.gov/advisories/ICSA-15-160-02
• http://www.securityfocus.com/bid/75100
• https://ics-cert.us-cert.gov/advisories/ICSA-15-160-02

Get alerted when CVE-2015-3949 or the next vulnerability affects your stack