Live › vulnerability › CVE-2022-29303
Go to dashboardSolarView Compact, a solar power monitoring appliance, has a command injection flaw in its send test mail console on the web server. An attacker who can reach that page can run operating system commands on the device.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| SolarView Compact | vendor | – | – |
| contec sv-cpt-mc310 firmware | vendor | = 6.00 | – |
Check whether the SolarView Compact web interface is reachable from the internet or untrusted networks.
Apply the vendor update per CISA guidance, or stop using the product if no update is available.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
SolarView Compact contains a command injection vulnerability due to improper validation of input values on the send test mail console of the product's web server.
CISA required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
This page as .md · .json · in your agent: get_signal("CVE-2022-29303")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.