OutBack Power Mate3s Gateway - Detect

OutBack Power Mate3s is a system hub and gateway for OutBack FX-series inverter-chargers used in off-grid, grid-hybrid, and battery backup solar power systems. The built-in web interface exposes system status, battery metrics, and inverter data. !/usr/bin/env python3 -- coding: utf-8 -- """OutBac...

CVE-2025-24861 Outback Power Mojave Inverter Command Injection

An attacker may inject commands via specially-crafted post requests...

CVE-2025-24861

CVE-2025-24861 concerns the Outback Power Mojave Inverter. The connected documents confirm a vulnerability that could allow an attacker to inject commands via specially-crafted POST requests to the device. The CVE notes a command injection issue; additional sources describe risk context in ICS ad...

CVE-2025-24861 Outback Power Mojave Inverter Command Injection

An attacker may inject commands via specially-crafted post requests...

CVE-2025-25281 Outback Power Mojave Inverter Exposure of Sensitive Information to an Unauthorized Actor

An attacker may modify the URL to discover sensitive information about the target network...

CVE-2025-25281

The CVE-2025-25281 issue affects Outback Power Mojave Inverter. The vulnerability arises from the inverter’s handling of requests that allow URL manipulation to reveal sensitive network information, and there is also a post request path that could enable command injection. The root cause is the e...

CVE-2025-25281 Outback Power Mojave Inverter Exposure of Sensitive Information to an Unauthorized Actor

An attacker may modify the URL to discover sensitive information about the target network...

CVE-2025-26473 Outback Power Mojave Inverter Use of GET Request Method With Sensitive Query Strings

The Mojave Inverter uses the GET method for sensitive information...

CVE-2025-26473

The CVE-2025-26473 entry concerns Outback Power Mojave Inverter. The vulnerability arises from using GET requests to access sensitive information (sensitive data exposed in query strings), enabling an attacker to retrieve confidential data via URL manipulation. The issue is documented across mult...

CISA Releases Twenty Industrial Control Systems Advisories

CISA released twenty Industrial Control Systems ICS advisories on February 13, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-044-01 Siemens SIMATIC S7-1200 CPU Family ICSA-25-044-02 Siemens SIMATIC...

Outback Power Mojave Inverter

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to access sensitive data or inject commands. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Disable un-used...

Outback Power Mojave Inverter information leakage vulnerability

The Outback Power Mojave Inverter is an AC inverter from Outback Power. An information disclosure vulnerability exists in the Outback Power Mojave Inverter that stems from the possibility that an attacker could modify the URL to discover sensitive information about the target network...

Outback Power Mojave Inverter security vulnerability

Outback Power Mojave Inverter is an AC inverter from Outback Power. A security vulnerability exists in the Outback Power Mojave Inverter that originates from the ability to obtain sensitive information using the GET method...

PT-2025-7065

Name of the Vulnerable Software and Affected Versions: Outback Power - Mojave Inverter versions all Description: An attacker may modify the URL to discover sensitive information about the target network. Recommendations: For all versions, consider restricting access to sensitive network informati...

Outback Power Mojave Inverter command injection vulnerability

The Outback Power Mojave Inverter is an AC inverter from Outback Power. A command injection vulnerability exists in the Outback Power Mojave Inverter, which stems from the fact that an attacker could inject commands via a specially crafted post request...

PT-2025-7039

Name of the Vulnerable Software and Affected Versions: Outback Power - Mojave Inverter versions all Description: An attacker may inject commands via specially-crafted post requests. Recommendations: For all versions, consider restricting access to the post request functionality until a patch is...