Fronius Solar Inverter Series Insecure Communication / Path Traversal

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilites product: Fronius Solar Inverter Series vulnerable version: SW Version =3.14.1 vuln 2: 3.12.5 - HM 1.10.5, see solution section below CVE number:...

fronius.com XSS vulnerability

Vulnerable URL: http://www.fronius.com/cps/rde/xchg/SID-D84F36DA-23354C82/froniusinternational/hs.xsl/68searchENGHTML.htm?query="-alert/OPENBUGBOUNTY/-"=ENGsubmitsearch=Suche Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 14:51 GMT Vulnerabili...

CVE-2023-37621

CVE-2023-37621 : Multiple sources tie this entry to Fronius Datalogger Web, specifically version 2.0.5-4 . The reported issue is Cross-Site Request Forgery (CSRF) that can allow remote attackers to obtain sensitive information via a crafted request. PT-Security states there is no known fix for ve...