CVE-2024-23786

CVE-2024-23786 affects the Sharp Energy Management Controller with Cloud Services (JH-RVB1/JH-RV11, Ver.B0.1.9.1 and earlier). The vulnerability is a stored cross-site scripting issue that allows a network-adjacent unauthenticated attacker to cause arbitrary script execution in a user’s browser w...

CVE-2024-23787

A path traversal vulnerability exists in SHARP Energy Management Controller with Cloud Services (JH-RVB1 / JH-RV11) versions B0.1.9.1 and earlier . This flaw allows a network-adjacent unauthenticated attacker to obtain arbitrary files by accessing directories outside the web root folder. To remed...

CVE-2024-23783

CVE-2024-23783 affects Sharp Energy Management Controller with Cloud Services (JH-RVB1/JH-RV11) up to Ver.B0.1.9.1. The vulnerability is described as improper authentication allowing a network-adjacent unauthenticated attacker to access the product without authentication. Public sources in the co...

CVE-2024-23784

The CVE-2024-23784 issue affects SHARP Energy Management Controller with Cloud Services (JH-RVB1/JH-RV11) up to Ver.B0.1.9.1, where improper access control could allow a network-adjacent, unauthenticated attacker to view a username and its hashed password on the product’s management page. The SHA...

CVE-2024-23789

The Energy Management Controller with Cloud Services (JH-RVB1 / JH-RV11) is vulnerable to an OS command injection (CWE-78) in versions B0.1.9.1 and earlier . A network-adjacent unauthenticated attacker can exploit this flaw to execute arbitrary commands on the affected product. To remediate this,...

CVE-2024-23788

The Energy Management Controller with Cloud Services (models JH-RVB1 and JH-RV11 ) is vulnerable to a Server-side request forgery (SSRF) vulnerability (CWE-918 ) in versions Ver.B0.1.9.1 and earlier. This flaw allows a network-adjacent unauthenticated attacker to force the affected product to sen...

CVE-2024-23785

The CVE-2024-23785 entry concerns Sharp Energy Management Controller with Cloud Services (JH-RVB1/JH-RV11) affected up to Ver.B0.1.9.1. The vulnerability is a Cross-site Request Forgery (CSRF) that enables a remote unauthenticated attacker to change product settings. Documents from multiple sourc...