Vulnerabilities

TI-2025-18570 CVE-2025-24861 · GHSA-qg4v-q6r4-gqhg

Outback Power Mojave Inverter Command Injection

MEDIUM 44

An attacker may inject commands via specially-crafted post requests.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00545 Published 2025-02-13 No fix listed CWE-77

TI-2025-18935 CVE-2025-25281 · GHSA-qg5c-v9j4-c7gw

MEDIUM 44

An attacker may modify the URL to discover sensitive information about the target network.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00463 Published 2025-02-13 No fix listed CWE-200

TI-2025-19420 CVE-2025-26473 · GHSA-mxw5-pq7x-p39x

MEDIUM 44

The Mojave Inverter uses the GET method for sensitive information.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00463 Published 2025-02-13 No fix listed CWE-598