Unauthorized Command Execution Vulnerability in Energy Management Controller
CVE-2024-23789

Currently unrated

Key Information:

Vendor
Sharp Corporation
Status
Energy Management Controller With Cloud Services
Vendor
CVE Published:
14 February 2024

Summary

Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker to execute an arbitrary OS command on the affected product.

Affected Version(s)

Energy Management Controller with Cloud Services JH-RVB1 Ver.B0.1.9.1 and earlier

Energy Management Controller with Cloud Services JH-RV11 Ver.B0.1.9.1 and earlier

References

https://jp.sharp/support/taiyo/info/JVNVU94591337_en.pdf
https://jp.sharp/support/taiyo/info/JVNVU94591337_jp.pdf
https://jvn.jp/en/vu/JVNVU94591337/

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.