CVE-2015-3949
Sinapsi eSolar Light with firmware before 2.0.3970_schsl_2.2.85 allows attackers to discover...
Sinapsi eSolar Light with firmware before 2.0.3970_schsl_2.2.85 allows attackers to discover cleartext passwords by reading the HTML source code of the mail-configuration page.
Exploit likelihood
What each source reports
NVD Score used
Sinapsi eSolar Light with firmware before 2.0.3970_schsl_2.2.85 allows attackers to discover cleartext passwords by reading the HTML source code of the mail-configuration page.
- Record
CVE-2015-3949- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
Sinapsi eSolar Light with firmware before 2.0.3970_schsl_2.2.85 allows attackers to discover cleartext passwords by reading the HTML source code of the mail-configuration page.
- Record
CVE-2015-3949- Updated
- 2026-11-02
EUVDEUVD-2015-3980 No score
Sinapsi eSolar Light with firmware before 2.0.3970_schsl_2.2.85 allows attackers to discover cleartext passwords by reading the HTML source code of the mail-configuration page.
- Record
EUVD-2015-3980- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c65h-wc2c-563w No score
Sinapsi eSolar Light with firmware before 2.0.3970_schsl_2.2.85 allows attackers to discover...
Sinapsi eSolar Light with firmware before 2.0.3970_schsl_2.2.85 allows attackers to discover cleartext passwords by reading the HTML source code of the mail-configuration page.
- Record
GHSA-c65h-wc2c-563w- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-3949 is a low vulnerability (CVSS 2.1) in Sinapsi Esolar Light Firmware, published June 13, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 28th percentile. No source names a fixed version.