CVE-2024-23785

Summary

Cross-site request forgery vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a remote unauthenticated attacker to change the product settings.

Affected Software

VendorProductVersion RangeStatus
SHARP CORPORATIONEnergy Management Controller with Cloud ServicesJH-RVB1 Ver.B0.1.9.1 and earlieraffected
SHARP CORPORATIONEnergy Management Controller with Cloud ServicesJH-RV11 Ver.B0.1.9.1 and earlieraffected

Weaknesses

  • Cross-site request forgery (CSRF)

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References