CVE-2024-23789

The Energy Management Controller with Cloud Services (JH-RVB1 / JH-RV11) is vulnerable to an OS command injection (CWE-78) in versions B0.1.9.1 and earlier . A network-adjacent unauthenticated attacker can exploit this flaw to execute arbitrary commands on the affected product. To remediate this,...