CVE-2024-23789

The SHARP Energy Management Controller with Cloud Services (JH-RVB1 / JH-RV11) versions B0.1.9.1 and earlier are vulnerable to an OS command injection (CWE-78). A network-adjacent unauthenticated attacker can exploit this flaw to execute arbitrary commands on the affected product. To remediate th...