Unauthorized Command Execution Vulnerability in Energy Management Controller
CVE-2024-23789

Currently unrated

Key Information:

Vendor: Sharp Corporation
Status: Energy Management Controller With Cloud Services
Vendor: CVE Published:; 14 February 2024

🔔 Create Sharp Corporation Vulnerability Alert

What is CVE-2024-23789?

Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker to execute an arbitrary OS command on the affected product.

Affected Version(s)

Energy Management Controller with Cloud Services JH-RVB1 Ver.B0.1.9.1 and earlier

Energy Management Controller with Cloud Services JH-RV11 Ver.B0.1.9.1 and earlier

References

https://jp.sharp/support/taiyo/info/JVNVU94591337_en.pdf

https://jp.sharp/support/taiyo/info/JVNVU94591337_jp.pdf

https://jvn.jp/en/vu/JVNVU94591337/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Feb 14, 2024
Vulnerability Reserved
Jan 22, 2024