Fronius

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Fronius records in CISA KEV

No Fronius vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Datamanager Box 2.0 Firmware 2 records MEDIUM Eco 25.0-3-s Firmware 2 records MEDIUM Eco 27.0-3-s Firmware 2 records MEDIUM Galvo 1.5-1 208-240 Firmware 2 records MEDIUM Galvo 1.5-1 Firmware 2 records MEDIUM Galvo 2.0-1 208-240 Firmware 2 records MEDIUM Galvo 2.0-1 Firmware 2 records MEDIUM Galvo 2.5-1 208-240 Firmware 2 records MEDIUM

Records

2 records in Datamanager Box 2.0 Firmware · all components

TI-2019-13858 CVE-2019-19228 · GHSA-h3gx-q82j-vhq3

Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allow attackers to bypass…

MEDIUM 46

Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allow attackers to bypass authentication because the password for the today account is stored in the /tmp/web_users.conf file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01898 Published 2019-12-04 No fix listed CWE-312

TI-2019-13859 CVE-2019-19229 · GHSA-f268-9fq5-h8qf

admincgi-bin/service.fcgi on Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1)…

LOW 33

admincgi-bin/service.fcgi on Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allows action=download&filename= Directory Traversal.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02314 Published 2019-12-04 No fix listed CWE-22

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0