CVE-2024-23789

Summary

Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker to execute an arbitrary OS command on the affected product.

Affected Software

VendorProductVersion RangeStatus
SHARP CORPORATIONEnergy Management Controller with Cloud ServicesJH-RVB1 Ver.B0.1.9.1 and earlieraffected
SHARP CORPORATIONEnergy Management Controller with Cloud ServicesJH-RV11 Ver.B0.1.9.1 and earlieraffected

Weaknesses

  • OS command injection

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: total

References