Energy Management Controller with Cloud Services vulnerabilities

Product

Energy Management Controller with Cloud Services

by SHARP CORPORATION · last CVE Feb 14, 2024

CVEs

On KEV

9.3

Max CVSS

New 30D

Vulnerabilities7 In the news0 Timeline

Severity mix

Critical 1High 3Medium 3Low 0

Severity

All severities7 Critical1 High3 Medium3 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Energy Management Controller with Cloud Services to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-23786	9.3	1%	Feb 14	Cross-site scripting vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker… Affected: JH-RVB1 Ver.B0.1.9.1 and earlier; JH-RV11 Ver.B0.1.9.1 and earlier
CVE-2024-23789	8.8	1%	Feb 14	Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker to execute an arbitrary OS command on… Affected: JH-RVB1 Ver.B0.1.9.1 and earlier; JH-RV11 Ver.B0.1.9.1 and earlier
CVE-2024-23783	8.8	1%	Feb 14	Improper authentication vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated… Affected: JH-RVB1 Ver.B0.1.9.1 and earlier; JH-RV11 Ver.B0.1.9.1 and earlier
CVE-2024-23788	8.1	1%	Feb 14	Server-side request forgery vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated… Affected: JH-RVB1 Ver.B0.1.9.1 and earlier; JH-RV11 Ver.B0.1.9.1 and earlier
CVE-2024-23787	6.5	1%	Feb 14	Path traversal vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker to… Affected: JH-RVB1 Ver.B0.1.9.1 and earlier; JH-RV11 Ver.B0.1.9.1 and earlier
CVE-2024-23785	6.5	0%	Feb 14	Cross-site request forgery vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a remote unauthenticated attacker to… Affected: JH-RVB1 Ver.B0.1.9.1 and earlier; JH-RV11 Ver.B0.1.9.1 and earlier
CVE-2024-23784	6.5	0%	Feb 14	Improper access control vulnerability exists in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier, which may allow a network-adjacent… Affected: JH-RVB1 Ver.B0.1.9.1 and earlier; JH-RV11 Ver.B0.1.9.1 and earlier