Skip to content
OpenAdvisories
Medium · 6.1 CVE-2024-23785 EUVD-2024-21238GHSA-mgxj-q65h-43hg

Cross-site request forgery vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allo…

Published Feb 14, 2024 · Updated Oct 27, 2024 · Assigned by jpcert

Description

Cross-site request forgery vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a remote unauthenticated attacker to change the product settings.

Affected products

VendorProductAffectedFixed
SHARP Energy Management Controller with Cloud Services JH-RVB1 Ver.B0.1.9.1 and earlier, JH-RV11 Ver.B0.1.9.1 and earlier —

References