Affected: Sinapsi eSolar, Sinapsi eSolar DUO, Sinapsi eSolar Light

These Sinapsi devices store hard-coded passwords in the PHP file of the device. By using the hard-coded passwords in the device, attackers can log into the device with administrative privileges. This could allow the attacker to have unauthorized access.