© 2026 vulntracker.io

CVE-2017-20020

Solare Solar-Log cross-site request forgery

HIGH

8.8

CVSS Score

Published: June 9, 2022 at 10:35 PM UTC

Updated: June 17, 2026 at 01:14 AM UTC

17 products affected across 2 vendorsSolar Log 1000 FirmwareSolar Log 2000 FirmwareSolar Log 1200 Firmware

Using Solar-Log by Solare?

Get instant alerts when new vulnerabilities affect Solar-Log - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH8.8

Exploit prediction

EPSS 0.4%

SSVC

PoC

Description

A vulnerability, which was classified as problematic, has been found in Solare Solar-Log 2.8.4-56/3.5.2-85. Affected by this issue is some unknown functionality. The manipulation leads to cross site request forgery. The attack may be launched remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Solar Log 1000 Firmware · Solar Log

95%

2.8.4-56 3.5.2-85

Solar Log 1000 Pm+ Firmware · Solar Log

95%

2.8.4-56 3.5.2-85

solar-log-solar-log-1000-pm (same device)

Solar Log 1200 Firmware · Solar Log

95%

2.8.4-56 3.5.2-85

solar-log-solar-log-1200 (same device)

Solar Log 2000 Firmware · Solar Log

95%

2.8.4-56 3.5.2-85

solar-log-solar-log-2000 (same device)

Solar Log 250 Firmware · Solar Log

95%

2.8.4-56 3.5.2-85

solar-log-solar-log-250 (same device)

Solar Log 300 Firmware · Solar Log

95%

2.8.4-56 3.5.2-85

solar-log-solar-log-300 (same device)

Solar Log 500 Firmware · Solar Log

95%

2.8.4-56 3.5.2-85

solar-log-solar-log-500 (same device)

Solar Log 800E Firmware · Solar Log

95%

2.8.4-56 3.5.2-85

solar-log-solar-log-800e (same device)

Solar-Log 1000 · Solar Log

90%

2.8.4-56 3.5.2-85

Solar-Log · Solare

60%

2.8.4-56 3.5.2-85

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (2)

x_refsource_MISCExploitMailing ListThird Party Advisory

Source: [email protected]

http://seclists.org/fulldisclosure/2017/Mar/58

x_refsource_MISCThird Party Advisory

Source: [email protected]

https://vuldb.com/?id.98930

SSVC — Action Prioritization

SSVCPoCAutomatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

8.8HIGH[email protected]

Attack Vector: NETWORK
Complexity: LOW
Privileges: NONE
User Interaction: REQUIRED
Scope: UNCHANGED
Confidentiality: HIGH
Integrity: HIGH
Availability: HIGH

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-352

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card