CVE-2024-23784: Medium severity SHARP Jh-rvb1 Firmware vulnerability
Improper access control vulnerability exists in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier, which may allow a network-adjacent unauthenticated attacker to obtain a username and its hashed password displayed on the management page of the affected product.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-23784?
CVE-2024-23784 has been assigned a high severity due to improper access control allowing unauthenticated attackers to access sensitive information.
How do I fix CVE-2024-23784?
To fix CVE-2024-23784, update the Energy Management Controller firmware to version B0.1.9.2 or later.
What types of devices are affected by CVE-2024-23784?
CVE-2024-23784 affects the Sharp JH-RVB1 and JH-RV11 devices with firmware versions B0.1.9.1 and earlier.
What could an attacker do with the vulnerability in CVE-2024-23784?
An attacker could exploit CVE-2024-23784 to obtain a username and its hashed password from the management page of the affected devices.
Is CVE-2024-23784 remotely exploitable?
Yes, CVE-2024-23784 is remotely exploitable as it allows network-adjacent attackers to access the affected management interfaces.