CVE-2012-5862

These Sinapsi devicesstore hard-coded passwords in the PHP file of the device. By using the hard-coded passwords in the device, attackers can log into the device with administrative privileges. This could allow the attacker to have unauthorized access.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

12.08% chance of exploitation in the next 30 days, 96th percentile

Published

2012-11-23

Updated

2025-07-08

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/21273/

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/21273

References

• CVE Record
• NVD entry

Related

• CVE-2012-5861
• CVE-2012-5863
• CVE-2012-5858
• CVE-2012-5864
• CVE-2012-5853
• CVE-2012-5865