CVE-2015-3949: Sinapsi Esolar Light Firmware

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Sinapsi eSolar Light with firmware before 2.0.3970_schsl_2.2.85 allows attackers to discover cleartext passwords by reading the HTML source code of the mail-configuration page.

Affected products

• Sinapsi Esolar Light Firmware: up to and including 2.0.3970

Published 2015-06-13. Last modified 2026-06-17.