Back to Database
Status published
Medium
CVE-2019-19229
admincgi-bin/service.fcgi on Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1)...
Vulnerability Description
admincgi-bin/service.fcgi on Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allows action=download&filename= Directory Traversal.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-19229
Credits & Attribution
No credits recorded in the NVD database.
References
Affected Vendor
fronius
View all reports →Affected Software
datamanager box 2.0 firmware, eco 25.0-3-s firmware, eco 27.0-3-s firmware, galvo 1.5-1 firmware, galvo 1.5-1 208-240 firmware, galvo 2.0-1 firmware, galvo 2.0-1 208-240 firmware, galvo 2.5-1 firmware, galvo 2.5-1 208-240 firmware, galvo 3.0-1 firmware, galvo 3.1-1 firmware, galvo 3.1-1 208-240 firmware, primo 10.0-1 208-240 firmware, primo 11.4-1 208-240 firmware, primo 12.5-1 208-240 firmware, primo 15.0-1 208-240 firmware, primo 3.0-1 firmware, primo 3.5-1 firmware, primo 3.6-1 firmware, primo 3.8-1 208-240 firmware, primo 4.0-1 firmware, primo 4.6-1 firmware, primo 5.0-1 firmware, primo 5.0-1 208-240 firmware, primo 5.0-1 aus firmware, primo 5.0-1 sc firmware, primo 6.0-1 firmware, primo 6.0-1 208-240 firmware, primo 7.6-1 208-240 firmware, primo 8.2-1 firmware, primo 8.2-1 208-240 firmware, symo 10.0-3-m firmware, symo 10.0-3-m-os firmware, symo 10.0-3 208-240 firmware, symo 10.0-3 480 firmware, symo 12.0-3 208-240 firmware, symo 12.5-3-m firmware, symo 12.5-3 480 firmware, symo 15.0-3-m firmware, symo 15.0-3 107 firmware, symo 15.0-3 480 firmware, symo 17.5-3-m firmware, symo 17.5-3 480 firmware, symo 20.0-3-m firmware, symo 20.0-3 480 firmware, symo 22.7-3 480 firmware, symo 24.0-3 480 firmware, symo 3.0-3-m firmware, symo 3.0-3-s firmware, symo 3.7-3-m firmware, symo 3.7-3-s firmware, symo 4.5-3-m firmware, symo 4.5-3-s firmware, symo 5.0-3-m firmware, symo 6.0-3-m firmware, symo 7.0-3-m firmware, symo 8.2-3-m firmware, symo advanced 10.0-3 208-240 firmware, symo advanced 12.0-3 208-240 firmware, symo advanced 15.0-3 480 firmware, symo advanced 20.0-3 480 firmware, symo advanced 22.7-3 480 firmware, symo advanced 24.0-3 480 firmware, symo hybrid 3.0-3-m firmware, symo hybrid 4.0-3-m firmware, symo hybrid 5.0-3-m firmware
Vulnerable Versions:
0
Timeline
Official Publish:
December 4th, 2019
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.