CVE-2024-23788: Server-Side Request Forgery (SSRF)

Server-side request forgery vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker to send an arbitrary HTTP request GET from the affected product...

PT-2024-20083

Name of the Vulnerable Software and Affected Versions Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 versions B0.1.9.1 and earlier Description An improper access control issue exists, potentially allowing a network-adjacent unauthenticated attacker to obtain a username and its...