CVE-2024-23788

Summary

Server-side request forgery vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker to send an arbitrary HTTP request (GET) from the affected product.

Affected Software

VendorProductVersion RangeStatus
SHARP CORPORATIONEnergy Management Controller with Cloud ServicesJH-RVB1 Ver.B0.1.9.1 and earlieraffected
SHARP CORPORATIONEnergy Management Controller with Cloud ServicesJH-RV11 Ver.B0.1.9.1 and earlieraffected

Weaknesses

  • Server-Side Request Forgery (SSRF)

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: total

References