Symo 10.0-3 208-240 Firmware CVEs and Security Vulnerabilities

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2019-19229

admincgi-bin/service.fcgi on Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allows action=download&filename= Directory Traversal.

CVSS 3.1 · 6.5 Medium EPSS 2.3% KEV · Not listed

Vendors

Fronius

Products

Datamanager Box 2.0 Datamanager Box 2.0 Firmware Eco 25.0-3-s and 129 more

CVE-2019-19228

Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allow attackers to bypass authentication because the password for the today account is stored in the /tmp/web_users.conf file.

CVSS 3.1 · 9.8 Critical EPSS 1.9% KEV · Not listed

Vendors

Fronius

Products

Datamanager Box 2.0 Datamanager Box 2.0 Firmware Eco 25.0-3-s and 129 more

Page 1 of 1.