Back to Database
Status published
Unknown
CVE-2024-23788
Server-side request forgery vulnerability in Energy Management Controller with Cloud...
Vulnerability Description
Server-side request forgery vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker to send an arbitrary HTTP request (GET) from the affected product.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-23788
Credits & Attribution
No credits recorded in the NVD database.
References
More from SHARP CORPORATION
View All →CVE-2024-23789
Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and...
Unknown
0
CVE-2024-23787
Path traversal vulnerability in Energy Management Controller with Cloud Services...
Unknown
0
CVE-2024-23786
Cross-site scripting vulnerability in Energy Management Controller with Cloud Services...
Unknown
0
CVE-2024-23785
Cross-site request forgery vulnerability in Energy Management Controller with Cloud...
Unknown
0
CVE-2024-23784
Improper access control vulnerability exists in Energy Management Controller with...
Unknown
0
Affected Vendor
SHARP CORPORATION
View all reports →Affected Software
Energy Management Controller with Cloud Services
Vulnerable Versions:
JH-RVB1 Ver.B0.1.9.1 and earlier, JH-RV11 Ver.B0.1.9.1 and earlier
Timeline
Official Publish:
February 14th, 2024
Last Modified:
March 19th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.