Sharp Jh Rvb1 vulnerabilities
7 vulnerabilities
Known vulnerabilities in Sharp Jh Rvb1, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2024-23789sharp corporationenergy management controller with cloud services+2
EPSS score1.18%
Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker to execute an arbitrary OS command on the affected product.CVE-2024-23785sharp corporationenergy management controller with cloud services+2EPSS score0.36%
Cross-site request forgery vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a remote unauthenticated attacker to change the product settings.CVE-2024-23786sharp corporationenergy management controller with cloud services+2EPSS score0.79%
Cross-site scripting vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker to execute an arbitrary script on the web browser of the user who is accessing the management page of the affected product.CVE-2024-23787sharp corporationenergy management controller with cloud services+2EPSS score0.89%
Path traversal vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker to obtain an arbitrary file in the affected product.CVE-2024-23784sharp corporationenergy management controller with cloud services+2EPSS score0.39%
Improper access control vulnerability exists in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier, which may allow a network-adjacent unauthenticated attacker to obtain a username and its hashed password displayed on the management page of the affected product.CVE-2024-23788sharp corporationenergy management controller with cloud services+2EPSS score0.81%
Server-side request forgery vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker to send an arbitrary HTTP request (GET) from the affected product.CVE-2024-23783sharp corporationenergy management controller with cloud services+2EPSS score0.52%
Improper authentication vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker to access the affected product without authentication.