CVE-2024-35295 - CVE House
Back to Database
Status published Medium CVE-2024-35295

A vulnerability has been identified in Perfect Harmony GH180 (All...

Vulnerability Description

A vulnerability has been identified in Perfect Harmony GH180 (All versions >= V8.0 < V8.3.3 with NXGPro+ controller manufactured between April 2020 to April 2025). The maintenance connection of affected devices fails to protect access to the device's control unit configuration. This could allow an attacker with physical access to the maintenance connection's door port to perform arbitrary configuration changes.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-35295

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

Perfect Harmony GH180
Vulnerable Versions:
V8.0

Timeline

Official Publish: June 11th, 2025
Last Modified: June 12th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Weaknesses (CWE)