CVEs (2)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Fronius 66Datamanager Box 2.0 Firmware Eco 25.0 3 S FirmwareEco 27.0 3 S Firmware+63 moreJun 17, 2026 Dec 4, 2019 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 admincgi-bin/service.fcgi on Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allows action=download&filename= Directory Traversal. |
1Fronius 66Datamanager Box 2.0 Firmware Eco 25.0 3 S FirmwareEco 27.0 3 S Firmware+63 moreJun 17, 2026 Dec 4, 2019 N/A· v4 9.8 CRITICAL· v3 5.0 MEDIUM· v2 Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allow attackers to bypass authentication because the password for the today account is stored in the /tmp/web_users.conf file. |