CVE-2024-23784 - CVE House
Back to Database
Status published Unknown CVE-2024-23784

Improper access control vulnerability exists in Energy Management Controller with...

Vulnerability Description

Improper access control vulnerability exists in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier, which may allow a network-adjacent unauthenticated attacker to obtain a username and its hashed password displayed on the management page of the affected product.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-23784

Credits & Attribution

No credits recorded in the NVD database.

References

More from SHARP CORPORATION

View All →
CVE-2024-23789
Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and...
Unknown 0
CVE-2024-23788
Server-side request forgery vulnerability in Energy Management Controller with Cloud...
Unknown 0
CVE-2024-23787
Path traversal vulnerability in Energy Management Controller with Cloud Services...
Unknown 0
CVE-2024-23786
Cross-site scripting vulnerability in Energy Management Controller with Cloud Services...
Unknown 0
CVE-2024-23785
Cross-site request forgery vulnerability in Energy Management Controller with Cloud...
Unknown 0

Affected Vendor

SHARP CORPORATION

View all reports →

Affected Software

Energy Management Controller with Cloud Services
Vulnerable Versions:
JH-RVB1 Ver.B0.1.9.1 and earlier, JH-RV11 Ver.B0.1.9.1 and earlier

Timeline

Official Publish: February 14th, 2024
Last Modified: March 25th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.