NEP inverter device information disclosure vulnerability

NEP inverter devices is an inverter device from Northern Electric & Power NEP. A security vulnerability exists in the NEP inverter devices. A remote attacker can exploit this vulnerability by sending a direct request to the nep/status/index/1 URI to obtain sensitive information...

PT-2018-11485

Name of the Vulnerable Software and Affected Versions Northern Electric & Power NEP inverter devices affected versions not specified Description The issue allows remote attackers to obtain potentially sensitive information via a direct request for the "nep/status/index/1" API endpoint...

CVE-2018-12927: Exposure of Sensitive Information to an Unauthorized Actor

Northern Electric & Power NEP inverter devices allow remote attackers to obtain potentially sensitive information via a direct request for the nep/status/index/1 URI...