Active Exploitation of SolarView Compact Command Injection Vulnerabilities (CVE-2022-40881, CVE-2022-29303)

What is SolarView Compact?



SolarView Compact is a photovoltaic (PV) power generation measurement and monitoring device developed by Contec.







What is the Attack?

CVE-2022-29303 is a command injection vulnerability in SolarView Compact that allows attackers to steal or modify information, destroy the system, or execute malicious programs by entering commands from the test email transmission screen.
CVE-2022-40881 is a command injection vulnerability in SolarView Compat that allows attackers to steal or modify information, destroy the system, or execute malicious programs …

attack attackers command command injection contec cve cve-2022-29303 destroy device exploitation information injection malicious measurement monitoring power solarview steal system vulnerabilities vulnerability what is