admincgi-bin/service.fcgi on Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allows action=download&filename= Directory Traversal.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NFronius Datamanager Box 2.0
HWFroniusall versionsFronius Datamanager Box 2.0 Firmware
OSFronius< 3.14.1Fronius Eco 25.0 3 S
HWFroniusall versionsFronius Eco 25.0 3 S Firmware
OSFronius< 3.14.1Fronius Eco 27.0 3 S
HWFroniusall versionsFronius Eco 27.0 3 S Firmware
OSFronius< 3.14.1Fronius Galvo 1.5 1
HWFroniusall versionsFronius Galvo 1.5 1 208 240
HWFroniusall versionsFronius Galvo 1.5 1 208 240 Firmware
OSFronius< 3.14.1Fronius Galvo 1.5 1 Firmware
OSFronius< 3.14.1Fronius Galvo 2.0 1
HWFroniusall versionsFronius Galvo 2.0 1 208 240
HWFroniusall versionsFronius Galvo 2.0 1 208 240 Firmware
OSFronius< 3.14.1Fronius Galvo 2.0 1 Firmware
OSFronius< 3.14.1Fronius Galvo 2.5 1
HWFroniusall versionsFronius Galvo 2.5 1 208 240
HWFroniusall versionsFronius Galvo 2.5 1 208 240 Firmware
OSFronius< 3.14.1Fronius Galvo 2.5 1 Firmware
OSFronius< 3.14.1Fronius Galvo 3.0 1
HWFroniusall versionsFronius Galvo 3.0 1 Firmware
OSFronius< 3.14.1Fronius Galvo 3.1 1
HWFroniusall versionsFronius Galvo 3.1 1 208 240
HWFroniusall versionsFronius Galvo 3.1 1 208 240 Firmware
OSFronius< 3.14.1Fronius Galvo 3.1 1 Firmware
OSFronius< 3.14.1Fronius Primo 10.0 1 208 240
HWFroniusall versionsFronius Primo 10.0 1 208 240 Firmware
OSFronius< 3.14.1Fronius Primo 11.4 1 208 240
HWFroniusall versionsFronius Primo 11.4 1 208 240 Firmware
OSFronius< 3.14.1Fronius Primo 12.5 1 208 240
HWFroniusall versionsFronius Primo 12.5 1 208 240 Firmware
OSFronius< 3.14.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Path Traversal
CWE