Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allow attackers to bypass…
Priority MEDIUM 46CWE-312Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-312.
Summary
Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allow attackers to bypass authentication because the password for the today account is stored in the /tmp/web_users.conf file.
Why it matters now
EPSS 0.01898 79th percentileScored 2026-11-07
Public exploit Yes 3 exploit referencesTagged by NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 132
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:fronius:datamanager_box_2.0_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:datamanager_box_2.0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:eco_25.0-3-s_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:eco_25.0-3-s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:eco_27.0-3-s_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:eco_27.0-3-s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:galvo_1.5-1_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:galvo_1.5-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:galvo_1.5-1_208-240_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:galvo_1.5-1_208-240:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
- cpe:2.3:o:fronius:datamanager_box_2.0_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:datamanager_box_2.0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:eco_25.0-3-s_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:eco_25.0-3-s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:eco_27.0-3-s_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:eco_27.0-3-s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:galvo_1.5-1_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:galvo_1.5-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:galvo_1.5-1_208-240_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:galvo_1.5-1_208-240:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
Show 122 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:fronius:galvo_2.0-1_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:galvo_2.0-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:galvo_2.0-1_208-240_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:galvo_2.0-1_208-240:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:galvo_2.5-1_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:galvo_2.5-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:galvo_2.5-1_208-240_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:galvo_2.5-1_208-240:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:galvo_3.0-1_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:galvo_3.0-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:galvo_3.1-1_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:galvo_3.1-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:galvo_3.1-1_208-240_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:galvo_3.1-1_208-240:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:primo_10.0-1_208-240_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:primo_10.0-1_208-240:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:primo_11.4-1_208-240_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:primo_11.4-1_208-240:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:primo_12.5-1_208-240_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:primo_12.5-1_208-240:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:primo_15.0-1_208-240_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:primo_15.0-1_208-240:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:primo_3.0-1_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:primo_3.0-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:primo_3.5-1_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:primo_3.5-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:primo_3.6-1_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:primo_3.6-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:primo_3.8-1_208-240_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:primo_3.8-1_208-240:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:primo_4.0-1_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:primo_4.0-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:primo_4.6-1_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:primo_4.6-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:primo_5.0-1_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:primo_5.0-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:primo_5.0-1_208-240_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:primo_5.0-1_208-240:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:primo_5.0-1_aus_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:primo_5.0-1_aus:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:primo_5.0-1_sc_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:primo_5.0-1_sc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:primo_6.0-1_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:primo_6.0-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:primo_6.0-1_208-240_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:primo_6.0-1_208-240:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:primo_7.6-1_208-240_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:primo_7.6-1_208-240:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:primo_8.2-1_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:primo_8.2-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:primo_8.2-1_208-240_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:primo_8.2-1_208-240:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:symo_10.0-3-m_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:symo_10.0-3-m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:symo_10.0-3-m-os_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:symo_10.0-3-m-os:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:symo_10.0-3_208-240_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:symo_10.0-3_208-240:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:symo_10.0-3_480_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:symo_10.0-3_480:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:symo_12.0-3_208-240_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:symo_12.0-3_208-240:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:symo_12.5-3-m_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:symo_12.5-3-m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:symo_12.5-3_480_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:symo_12.5-3_480:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:symo_15.0-3-m_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:symo_15.0-3-m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:symo_15.0-3_107_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:symo_15.0-3_107:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:symo_15.0-3_480_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:symo_15.0-3_480:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:symo_17.5-3-m_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:symo_17.5-3-m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:symo_17.5-3_480_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:symo_17.5-3_480:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:symo_20.0-3-m_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:symo_20.0-3-m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:symo_20.0-3_480_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:symo_20.0-3_480:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:symo_22.7-3_480_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:symo_22.7-3_480:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:symo_24.0-3_480_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:symo_24.0-3_480:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:symo_3.0-3-m_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:symo_3.0-3-m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:symo_3.0-3-s_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:symo_3.0-3-s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:symo_3.7-3-m_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:symo_3.7-3-m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:symo_3.7-3-s_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:symo_3.7-3-s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:symo_4.5-3-m_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:symo_4.5-3-m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:symo_4.5-3-s_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:symo_4.5-3-s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:symo_5.0-3-m_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:symo_5.0-3-m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:symo_6.0-3-m_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:symo_6.0-3-m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:symo_7.0-3-m_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:symo_7.0-3-m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:symo_8.2-3-m_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:symo_8.2-3-m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:symo_advanced_10.0-3_208-240_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:symo_advanced_10.0-3_208-240:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:symo_advanced_12.0-3_208-240_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:symo_advanced_12.0-3_208-240:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:symo_advanced_15.0-3_480_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:symo_advanced_15.0-3_480:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:symo_advanced_20.0-3_480_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:symo_advanced_20.0-3_480:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:symo_advanced_22.7-3_480_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:symo_advanced_22.7-3_480:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:symo_advanced_24.0-3_480_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:symo_advanced_24.0-3_480:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:symo_hybrid_3.0-3-m_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:symo_hybrid_3.0-3-m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:symo_hybrid_4.0-3-m_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:symo_hybrid_4.0-3-m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
| cpe:2.3:o:fronius:symo_hybrid_5.0-3-m_firmware:*:*:*:*:*:*:*:* | before 3.14.1 | Vulnerable | Fronius |
| cpe:2.3:h:fronius:symo_hybrid_5.0-3-m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fronius |
- cpe:2.3:o:fronius:galvo_2.0-1_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:galvo_2.0-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:galvo_2.0-1_208-240_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:galvo_2.0-1_208-240:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:galvo_2.5-1_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:galvo_2.5-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:galvo_2.5-1_208-240_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:galvo_2.5-1_208-240:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:galvo_3.0-1_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:galvo_3.0-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:galvo_3.1-1_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:galvo_3.1-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:galvo_3.1-1_208-240_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:galvo_3.1-1_208-240:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:primo_10.0-1_208-240_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:primo_10.0-1_208-240:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:primo_11.4-1_208-240_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:primo_11.4-1_208-240:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:primo_12.5-1_208-240_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:primo_12.5-1_208-240:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:primo_15.0-1_208-240_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:primo_15.0-1_208-240:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:primo_3.0-1_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:primo_3.0-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:primo_3.5-1_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:primo_3.5-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:primo_3.6-1_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:primo_3.6-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:primo_3.8-1_208-240_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:primo_3.8-1_208-240:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:primo_4.0-1_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:primo_4.0-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:primo_4.6-1_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:primo_4.6-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:primo_5.0-1_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:primo_5.0-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:primo_5.0-1_208-240_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:primo_5.0-1_208-240:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:primo_5.0-1_aus_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:primo_5.0-1_aus:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:primo_5.0-1_sc_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:primo_5.0-1_sc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:primo_6.0-1_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:primo_6.0-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:primo_6.0-1_208-240_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:primo_6.0-1_208-240:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:primo_7.6-1_208-240_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:primo_7.6-1_208-240:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:primo_8.2-1_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:primo_8.2-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:primo_8.2-1_208-240_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:primo_8.2-1_208-240:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:symo_10.0-3-m_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:symo_10.0-3-m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:symo_10.0-3-m-os_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:symo_10.0-3-m-os:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:symo_10.0-3_208-240_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:symo_10.0-3_208-240:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:symo_10.0-3_480_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:symo_10.0-3_480:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:symo_12.0-3_208-240_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:symo_12.0-3_208-240:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:symo_12.5-3-m_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:symo_12.5-3-m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:symo_12.5-3_480_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:symo_12.5-3_480:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:symo_15.0-3-m_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:symo_15.0-3-m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:symo_15.0-3_107_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:symo_15.0-3_107:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:symo_15.0-3_480_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:symo_15.0-3_480:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:symo_17.5-3-m_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:symo_17.5-3-m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:symo_17.5-3_480_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:symo_17.5-3_480:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:symo_20.0-3-m_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:symo_20.0-3-m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:symo_20.0-3_480_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:symo_20.0-3_480:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:symo_22.7-3_480_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:symo_22.7-3_480:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:symo_24.0-3_480_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:symo_24.0-3_480:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:symo_3.0-3-m_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:symo_3.0-3-m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:symo_3.0-3-s_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:symo_3.0-3-s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:symo_3.7-3-m_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:symo_3.7-3-m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:symo_3.7-3-s_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:symo_3.7-3-s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:symo_4.5-3-m_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:symo_4.5-3-m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:symo_4.5-3-s_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:symo_4.5-3-s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:symo_5.0-3-m_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:symo_5.0-3-m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:symo_6.0-3-m_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:symo_6.0-3-m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:symo_7.0-3-m_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:symo_7.0-3-m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:symo_8.2-3-m_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:symo_8.2-3-m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:symo_advanced_10.0-3_208-240_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:symo_advanced_10.0-3_208-240:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:symo_advanced_12.0-3_208-240_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:symo_advanced_12.0-3_208-240:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:symo_advanced_15.0-3_480_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:symo_advanced_15.0-3_480:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:symo_advanced_20.0-3_480_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:symo_advanced_20.0-3_480:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:symo_advanced_22.7-3_480_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:symo_advanced_22.7-3_480:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:symo_advanced_24.0-3_480_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:symo_advanced_24.0-3_480:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:symo_hybrid_3.0-3-m_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:symo_hybrid_3.0-3-m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:symo_hybrid_4.0-3-m_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:symo_hybrid_4.0-3-m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
- cpe:2.3:o:fronius:symo_hybrid_5.0-3-m_firmware:*:*:*:*:*:*:*:* Versions before 3.14.1 Vulnerable ·Fronius
- cpe:2.3:h:fronius:symo_hybrid_5.0-3-m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fronius
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2019-19228
- 2026-10-03 Alias added: GHSA-h3gx-q82j-vhq3
References
More Fronius Datamanager Box 2.0 Firmware vulnerabilities
- TI-2019-13859 admincgi-bin/service.fcgi on Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1)… CVSS 3.1MEDIUM 6.5
Sources
- CVE-2019-19228 · CVE Program
- CVE-2019-19228 · NVD
- FIRST EPSS
- GHSA-h3gx-q82j-vhq3 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences