CVE-2024-40116: Solar-Log 1000 Firmware

High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue in Solar-Log 1000 before v2.8.2 and build 52-23.04.2013 was discovered to store plaintext passwords in the export.html, email.html, and sms.html files -- fixed with 3.0.0-60 11.10.2013 for SL 200, 500, 1000 / not existing for SL 250, 300, 1200, 2000, SL 50 Gateway, SL Base.

Affected products

• Solar-Log Solar-Log 1000 Firmware: before 2.8.2-52 (fixed in 2.8.2-52)

Published 2024-07-26. Last modified 2026-06-17.