Skip to content
OpenAdvisories
Critical · 9.3 CVE-2024-23786 EUVD-2024-21239GHSA-w34f-v8wf-pvqj

Cross-site scripting vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a n…

Published Feb 14, 2024 · Updated Mar 18, 2025 · Assigned by jpcert

Vendor: Sharp Product: Energy Management Controller with Cloud Services

Description

Cross-site scripting vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker to execute an arbitrary script on the web browser of the user who is accessing the management page of the affected product.

Affected products

VendorProductAffectedFixed
SHARP Energy Management Controller with Cloud Services JH-RVB1 Ver.B0.1.9.1 and earlier, JH-RV11 Ver.B0.1.9.1 and earlier —

References