45 matches found
Voltronic Power ViewPower Remote Code Execution Vulnerability (CNVD-2025-2159209)
Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. A remote code execution vulnerability exists in Voltronic Power ViewPower, which can be exploited by an attacker to execute code in the context of the current user...
Voltronic Power ViewPower Remote Code Execution Vulnerability (CNVD-2025-2159308)
Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. Voltronic Power ViewPower suffers from a remote code execution vulnerability that stems from a specific flaw in the LinuxMonitorConsole class, which can be exploited by an attacker to execute co...
Voltronic Power ViewPower SQL Injection Vulnerability
Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. Voltronic Power ViewPower Pro suffers from a SQL injection vulnerability that is caused by failing to properly validate a user-supplied string before constructing a SQL query using it. An attack...
SMA Solar Technology SUNNY TRIPOWER 安全漏洞
The SMA Solar Technology SUNNY TRIPOWER is a solar inverter from SMA Solar Technology, Germany. A security vulnerability exists in SMA Solar Technology SUNNY TRIPOWER 5.0, which stems from an insecure direct object reference that could lead to unauthorized user group access due to insecure cookie...
Shining a Light on SolarCity: Practical Exploitation of the X2e IoT Device (Part One)
In 2019, Mandiant’s Red Team discovered a series of vulnerabilities present within Digi International’s ConnectPort X2e device, which allows for remote code execution as a privileged user. Specifically, Mandiant’s research focused on SolarCity’s now owned by Tesla rebranded ConnectPort X2e device...
CVE-2019-19228
Fronius Solar Inverter devices before 3.14.1 HM 1.12.1 allow attackers to bypass authentication because the password for the today account is stored in the /tmp/webusers.conf file...
CVE-2019-19229
admincgi-bin/service.fcgi on Fronius Solar Inverter devices before 3.14.1 HM 1.12.1 allows action=download&filename= Directory Traversal...
CVE-2019-19229
admincgi-bin/service.fcgi on Fronius Solar Inverter devices before 3.14.1 HM 1.12.1 allows action=download&filename= Directory Traversal...
Directory traversal
admincgi-bin/service.fcgi on Fronius Solar Inverter devices before 3.14.1 HM 1.12.1 allows action=download&filename= Directory Traversal...
Authentication flaw
Fronius Solar Inverter devices before 3.14.1 HM 1.12.1 allow attackers to bypass authentication because the password for the today account is stored in the /tmp/webusers.conf file...
CVE-2019-19228
CVE-2019-19228 (and related CVE-2019-19229) affect Fronius Solar Inverter devices prior to version 3.14.1 (HM 1.12.1). The root cause is a credential handling flaw where the password for the today account is stored in /tmp/web_users.conf, enabling bypass of authentication. Related entry CVE-2019-...
CVE-2019-19228
Fronius Solar Inverter devices before 3.14.1 HM 1.12.1 allow attackers to bypass authentication because the password for the today account is stored in the /tmp/webusers.conf file...
CVE-2019-19229
CVE-2019-19229 affects Fronius Solar Inverter devices prior to 3.14.1 (HM 1.12.1). The vulnerability resides in the admincgi-bin/service.fcgi endpoint and is a Directory Traversal flaw triggered by action=download&filename=, potentially exposing restricted files. Explicit exploit details are not ...
CVE-2019-19229
admincgi-bin/service.fcgi on Fronius Solar Inverter devices before 3.14.1 HM 1.12.1 allows action=download&filename= Directory Traversal...
Fronius Solar Inverter Series Path Traversal Vulnerability
The Fronius Solar Inverter is a photovoltaic inverter device from the Austrian company Fronius. A path traversal vulnerability exists in admincgi-bin/service.fcgi in versions prior to Fronius Solar Inverter 3.14.1 HM 1.12.1. The vulnerability stems from a failure of a network system or product to...
Fronius Solar Inverter Series Backdoor Account Vulnerability
The Fronius Solar Inverter is a photovoltaic inverter device from the Austrian company Fronius. A security vulnerability exists in Fronius Solar Inverter versions prior to 3.14.1 HM 1.12.1, which stems from the program storing the 'today' account password in the /tmp/webusers.conf file. An attack...
Fronius Solar Inverter Series Insecure Communication / Path Traversal
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilites product: Fronius Solar Inverter Series vulnerable version: SW Version =3.14.1 vuln 2: 3.12.5 - HM 1.10.5, see solution section below CVE number:...
SAJ Solar Inverter Information Disclosure Vulnerability
SAJ Solar Inverter is a solar inverter product from China's Sanjing Electric Company. An information disclosure vulnerability exists in the SAJ Solar Inverter. A remote attacker can exploit this vulnerability by sending a direct request to the inverterinfo.htm or Englishmain.htm URIs to obtain...