Beveiligingsadvies

CVE-2024-50692

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-01-24 00:00:00

Laatst bijgewerkt 2025-02-06 16:15:21

Toegewezen door mitre

CVSS-score 5.4

Status PUBLISHED

Beschrijving

SunGrow WiNet-SV200.001.00.P027 and earlier versions contains hardcoded MQTT credentials that allow an attacker to send arbitrary commands to an arbitrary inverter. It is also possible to impersonate the broker, because TLS is not used to identify the real MQTT broker. This means that MQTT communications are vulnerable to MitM attacks at the TCP/IP level.

← Alle CVE's bekijken Bekijk op cve.org ↗