CVE-2024-23788
CVE-2024-23788
8.1
HighPublished:
Last updated:
Source:vultures@jpcert.or.jp
Modified
Weakness (CWE)
CVSS Vector
v3.1- Attack Vector
- Adjacent
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- None
- Scope
- Unchanged
- Confidentiality
- High
- Integrity
- High
- Availability
- None
Description
Server-side request forgery vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker to send an arbitrary HTTP request (GET) from the affected product.
References
vultures@jpcert.or.jp
https://jp.sharp/support/taiyo/info/JVNVU94591337_en.pdfvultures@jpcert.or.jp
https://jp.sharp/support/taiyo/info/JVNVU94591337_jp.pdfvultures@jpcert.or.jp
https://jvn.jp/en/vu/JVNVU94591337/af854a3a-2127-422b-91ae-364da2661108
https://jp.sharp/support/taiyo/info/JVNVU94591337_en.pdfaf854a3a-2127-422b-91ae-364da2661108
https://jp.sharp/support/taiyo/info/JVNVU94591337_jp.pdfaf854a3a-2127-422b-91ae-364da2661108
https://jvn.jp/en/vu/JVNVU94591337/