CVE Feed

    Dashboard / CVE / CVE-2019-19229

    CVE-2019-19229

    admincgi-bin/service.fcgi on Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allows action=download&filename= Directory Traversal.

    Published:Dec 4, 2019
    Last Modified:Nov 21, 2024
    EPS:Dec 4, 2019
    EPSS Score:0.00695
    CVSS Score:6.5

    Affected Products

    Vendor
    Fronius
    Product
    Datamanager Box 2.0
    Vendor
    Fronius
    Product
    Datamanager Box 2.0 Firmware
    Vendor
    Fronius
    Product
    Eco 25.0-3-s
    Vendor
    Fronius
    Product
    Eco 25.0-3-s Firmware
    Vendor
    Fronius
    Product
    Eco 27.0-3-s
    Vendor
    Fronius
    Product
    Eco 27.0-3-s Firmware
    Vendor
    Fronius
    Product
    Galvo 1.5-1
    Vendor
    Fronius
    Product
    Galvo 1.5-1 208-240
    Vendor
    Fronius
    Product
    Galvo 1.5-1 208-240 Firmware
    Vendor
    Fronius
    Product
    Galvo 1.5-1 Firmware
    Vendor
    Fronius
    Product
    Galvo 2.0-1
    Vendor
    Fronius
    Product
    Galvo 2.0-1 208-240
    Vendor
    Fronius
    Product
    Galvo 2.0-1 208-240 Firmware
    Vendor
    Fronius
    Product
    Galvo 2.0-1 Firmware
    Vendor
    Fronius
    Product
    Galvo 2.5-1
    Vendor
    Fronius
    Product
    Galvo 2.5-1 208-240
    Vendor
    Fronius
    Product
    Galvo 2.5-1 208-240 Firmware
    Vendor
    Fronius
    Product
    Galvo 2.5-1 Firmware
    Vendor
    Fronius
    Product
    Galvo 3.0-1
    Vendor
    Fronius
    Product
    Galvo 3.0-1 Firmware
    Vendor
    Fronius
    Product
    Galvo 3.1-1
    Vendor
    Fronius
    Product
    Galvo 3.1-1 208-240
    Vendor
    Fronius
    Product
    Galvo 3.1-1 208-240 Firmware
    Vendor
    Fronius
    Product
    Galvo 3.1-1 Firmware
    Vendor
    Fronius
    Product
    Primo 10.0-1 208-240
    Vendor
    Fronius
    Product
    Primo 10.0-1 208-240 Firmware
    Vendor
    Fronius
    Product
    Primo 11.4-1 208-240
    Vendor
    Fronius
    Product
    Primo 11.4-1 208-240 Firmware
    Vendor
    Fronius
    Product
    Primo 12.5-1 208-240
    Vendor
    Fronius
    Product
    Primo 12.5-1 208-240 Firmware
    Vendor
    Fronius
    Product
    Primo 15.0-1 208-240
    Vendor
    Fronius
    Product
    Primo 15.0-1 208-240 Firmware
    Vendor
    Fronius
    Product
    Primo 3.0-1
    Vendor
    Fronius
    Product
    Primo 3.0-1 Firmware
    Vendor
    Fronius
    Product
    Primo 3.5-1
    Vendor
    Fronius
    Product
    Primo 3.5-1 Firmware
    Vendor
    Fronius
    Product
    Primo 3.6-1
    Vendor
    Fronius
    Product
    Primo 3.6-1 Firmware
    Vendor
    Fronius
    Product
    Primo 3.8-1 208-240
    Vendor
    Fronius
    Product
    Primo 3.8-1 208-240 Firmware
    Vendor
    Fronius
    Product
    Primo 4.0-1
    Vendor
    Fronius
    Product
    Primo 4.0-1 Firmware
    Vendor
    Fronius
    Product
    Primo 4.6-1
    Vendor
    Fronius
    Product
    Primo 4.6-1 Firmware
    Vendor
    Fronius
    Product
    Primo 5.0-1
    Vendor
    Fronius
    Product
    Primo 5.0-1 208-240
    Vendor
    Fronius
    Product
    Primo 5.0-1 208-240 Firmware
    Vendor
    Fronius
    Product
    Primo 5.0-1 Aus
    Vendor
    Fronius
    Product
    Primo 5.0-1 Aus Firmware
    Vendor
    Fronius
    Product
    Primo 5.0-1 Firmware
    Vendor
    Fronius
    Product
    Primo 5.0-1 Sc
    Vendor
    Fronius
    Product
    Primo 5.0-1 Sc Firmware
    Vendor
    Fronius
    Product
    Primo 6.0-1
    Vendor
    Fronius
    Product
    Primo 6.0-1 208-240
    Vendor
    Fronius
    Product
    Primo 6.0-1 208-240 Firmware
    Vendor
    Fronius
    Product
    Primo 6.0-1 Firmware
    Vendor
    Fronius
    Product
    Primo 7.6-1 208-240
    Vendor
    Fronius
    Product
    Primo 7.6-1 208-240 Firmware
    Vendor
    Fronius
    Product
    Primo 8.2-1
    Vendor
    Fronius
    Product
    Primo 8.2-1 208-240
    Vendor
    Fronius
    Product
    Primo 8.2-1 208-240 Firmware
    Vendor
    Fronius
    Product
    Primo 8.2-1 Firmware
    Vendor
    Fronius
    Product
    Symo 10.0-3-m
    Vendor
    Fronius
    Product
    Symo 10.0-3-m-os
    Vendor
    Fronius
    Product
    Symo 10.0-3-m-os Firmware
    Vendor
    Fronius
    Product
    Symo 10.0-3-m Firmware
    Vendor
    Fronius
    Product
    Symo 10.0-3 208-240
    Vendor
    Fronius
    Product
    Symo 10.0-3 208-240 Firmware
    Vendor
    Fronius
    Product
    Symo 10.0-3 480
    Vendor
    Fronius
    Product
    Symo 10.0-3 480 Firmware
    Vendor
    Fronius
    Product
    Symo 12.0-3 208-240
    Vendor
    Fronius
    Product
    Symo 12.0-3 208-240 Firmware
    Vendor
    Fronius
    Product
    Symo 12.5-3-m
    Vendor
    Fronius
    Product
    Symo 12.5-3-m Firmware
    Vendor
    Fronius
    Product
    Symo 12.5-3 480
    Vendor
    Fronius
    Product
    Symo 12.5-3 480 Firmware
    Vendor
    Fronius
    Product
    Symo 15.0-3-m
    Vendor
    Fronius
    Product
    Symo 15.0-3-m Firmware
    Vendor
    Fronius
    Product
    Symo 15.0-3 107
    Vendor
    Fronius
    Product
    Symo 15.0-3 107 Firmware
    Vendor
    Fronius
    Product
    Symo 15.0-3 480
    Vendor
    Fronius
    Product
    Symo 15.0-3 480 Firmware
    Vendor
    Fronius
    Product
    Symo 17.5-3-m
    Vendor
    Fronius
    Product
    Symo 17.5-3-m Firmware
    Vendor
    Fronius
    Product
    Symo 17.5-3 480
    Vendor
    Fronius
    Product
    Symo 17.5-3 480 Firmware
    Vendor
    Fronius
    Product
    Symo 20.0-3-m
    Vendor
    Fronius
    Product
    Symo 20.0-3-m Firmware
    Vendor
    Fronius
    Product
    Symo 20.0-3 480
    Vendor
    Fronius
    Product
    Symo 20.0-3 480 Firmware
    Vendor
    Fronius
    Product
    Symo 22.7-3 480
    Vendor
    Fronius
    Product
    Symo 22.7-3 480 Firmware
    Vendor
    Fronius
    Product
    Symo 24.0-3 480
    Vendor
    Fronius
    Product
    Symo 24.0-3 480 Firmware
    Vendor
    Fronius
    Product
    Symo 3.0-3-m
    Vendor
    Fronius
    Product
    Symo 3.0-3-m Firmware
    Vendor
    Fronius
    Product
    Symo 3.0-3-s
    Vendor
    Fronius
    Product
    Symo 3.0-3-s Firmware
    Vendor
    Fronius
    Product
    Symo 3.7-3-m
    Vendor
    Fronius
    Product
    Symo 3.7-3-m Firmware
    Vendor
    Fronius
    Product
    Symo 3.7-3-s
    Vendor
    Fronius
    Product
    Symo 3.7-3-s Firmware
    Vendor
    Fronius
    Product
    Symo 4.5-3-m
    Vendor
    Fronius
    Product
    Symo 4.5-3-m Firmware
    Vendor
    Fronius
    Product
    Symo 4.5-3-s
    Vendor
    Fronius
    Product
    Symo 4.5-3-s Firmware
    Vendor
    Fronius
    Product
    Symo 5.0-3-m
    Vendor
    Fronius
    Product
    Symo 5.0-3-m Firmware
    Vendor
    Fronius
    Product
    Symo 6.0-3-m
    Vendor
    Fronius
    Product
    Symo 6.0-3-m Firmware
    Vendor
    Fronius
    Product
    Symo 7.0-3-m
    Vendor
    Fronius
    Product
    Symo 7.0-3-m Firmware
    Vendor
    Fronius
    Product
    Symo 8.2-3-m
    Vendor
    Fronius
    Product
    Symo 8.2-3-m Firmware
    Vendor
    Fronius
    Product
    Symo Advanced 10.0-3 208-240
    Vendor
    Fronius
    Product
    Symo Advanced 10.0-3 208-240 Firmware
    Vendor
    Fronius
    Product
    Symo Advanced 12.0-3 208-240
    Vendor
    Fronius
    Product
    Symo Advanced 12.0-3 208-240 Firmware
    Vendor
    Fronius
    Product
    Symo Advanced 15.0-3 480
    Vendor
    Fronius
    Product
    Symo Advanced 15.0-3 480 Firmware
    Vendor
    Fronius
    Product
    Symo Advanced 20.0-3 480
    Vendor
    Fronius
    Product
    Symo Advanced 20.0-3 480 Firmware
    Vendor
    Fronius
    Product
    Symo Advanced 22.7-3 480
    Vendor
    Fronius
    Product
    Symo Advanced 22.7-3 480 Firmware
    Vendor
    Fronius
    Product
    Symo Advanced 24.0-3 480
    Vendor
    Fronius
    Product
    Symo Advanced 24.0-3 480 Firmware
    Vendor
    Fronius
    Product
    Symo Hybrid 3.0-3-m
    Vendor
    Fronius
    Product
    Symo Hybrid 3.0-3-m Firmware
    Vendor
    Fronius
    Product
    Symo Hybrid 4.0-3-m
    Vendor
    Fronius
    Product
    Symo Hybrid 4.0-3-m Firmware
    Vendor
    Fronius
    Product
    Symo Hybrid 5.0-3-m
    Vendor
    Fronius
    Product
    Symo Hybrid 5.0-3-m Firmware

    Exploits

    http://packetstormsecurity.com/files/155562/Fronius-Solar-Inverter-Series-Insecure-Communication-Path-Traversal.htmlhttps://sec-consult.com/en/blog/advisories/multiple-vulnerabilites-in-fronius-solar-inverter-series-cve-2019-19229-cve-2019-19228/https://seclists.org/bugtraq/2019/Dec/5http://packetstormsecurity.com/files/155562/Fronius-Solar-Inverter-Series-Insecure-Communication-Path-Traversal.htmlhttps://sec-consult.com/en/blog/advisories/multiple-vulnerabilites-in-fronius-solar-inverter-series-cve-2019-19229-cve-2019-19228/https://seclists.org/bugtraq/2019/Dec/5

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High