Skip to content
OpenAdvisories
High ICSA-25-044-17 3 CVEs

Outback Power Mojave Inverter

Published Feb 13, 2025 · Updated Feb 13, 2025

Vendor: Outback Power Product: Mojave Inverter

Summary

Successful exploitation of these vulnerabilities could allow an attacker to access sensitive data or inject commands.

Vulnerabilities 3

  • High 7.5
    CVE-2025-24861

    Outback Power Mojave Inverter Command Injection

    An attacker may inject commands via specially-crafted post requests.

    Outback Power Mojave Inverter
  • High 7.5
    CVE-2025-25281

    Outback Power Mojave Inverter Exposure of Sensitive Information to an Unauthorized Actor

    An attacker may modify the URL to discover sensitive information about the target network.

    Outback Power Mojave Inverter
  • High 7.5
    CVE-2025-26473

    Outback Power Mojave Inverter Use of GET Request Method With Sensitive Query Strings

    The Mojave Inverter uses the GET method for sensitive information.

    Outback Power Mojave Inverter

Revision history

  1. #1

    Initial Publication

References