CVE-2024-23786 - CVE House
Back to Database
Status published Unknown CVE-2024-23786

Cross-site scripting vulnerability in Energy Management Controller with Cloud Services...

Vulnerability Description

Cross-site scripting vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker to execute an arbitrary script on the web browser of the user who is accessing the management page of the affected product.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-23786

Credits & Attribution

No credits recorded in the NVD database.

References

More from SHARP CORPORATION

View All →
CVE-2024-23789
Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and...
Unknown 0
CVE-2024-23788
Server-side request forgery vulnerability in Energy Management Controller with Cloud...
Unknown 0
CVE-2024-23787
Path traversal vulnerability in Energy Management Controller with Cloud Services...
Unknown 0
CVE-2024-23785
Cross-site request forgery vulnerability in Energy Management Controller with Cloud...
Unknown 0
CVE-2024-23784
Improper access control vulnerability exists in Energy Management Controller with...
Unknown 0

Affected Vendor

SHARP CORPORATION

View all reports →

Affected Software

Energy Management Controller with Cloud Services
Vulnerable Versions:
JH-RVB1 Ver.B0.1.9.1 and earlier, JH-RV11 Ver.B0.1.9.1 and earlier

Timeline

Official Publish: February 14th, 2024
Last Modified: March 18th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.