Vendor/product archive

fronius / galvo_2.5-1_firmware CVEs

Beta · best-effort

2 CVEs tagged to fronius / galvo_2.5-1_firmware — 1 Critical, 0 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to fronius vendor archive

CVE-2019-19229

Published Dec 4, 2019

admincgi-bin/service.fcgi on Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allows action=download&filename= Directory Traversal.

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2019-19228

Published Dec 4, 2019

Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allow attackers to bypass authentication because the password for the today account is stored in the /tmp/web_users.conf f…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1