Unauthorized Access Vulnerability in Energy Management Controller

CVE-2024-23783

Summary

An improper authentication vulnerability exists in the Energy Management Controller with Cloud Services models JH-RVB1 and JH-RV11, specifically in version B0.1.9.1 and earlier. This flaw allows a network-adjacent attacker to bypass authentication mechanisms and gain unauthorized access to the device. The absence of stringent authentication protocols poses significant security risks, enabling potential intrusions that could compromise the integrity and functionality of the affected systems.

References