CVEvulnerability

CVE-2019-19228

9.8 CRITICAL Published 2019-12-04 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-12-04
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-312

Description

Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allow attackers to bypass authentication because the password for the today account is stored in the /tmp/web_users.conf file.

Affected configurations

• fronius datamanager box 2.0 firmware (< 3.14.1) • fronius eco 25.0-3-s firmware (< 3.14.1) • fronius eco 27.0-3-s firmware (< 3.14.1) • fronius galvo 1.5-1 firmware (< 3.14.1) • fronius galvo 1.5-1 208-240 firmware (< 3.14.1) • fronius galvo 2.0-1 firmware (< 3.14.1) • fronius galvo 2.0-1 208-240 firmware (< 3.14.1) • fronius galvo 2.5-1 firmware (< 3.14.1) • fronius galvo 2.5-1 208-240 firmware (< 3.14.1) • fronius galvo 3.0-1 firmware (< 3.14.1) • fronius galvo 3.1-1 firmware (< 3.14.1) • fronius galvo 3.1-1 208-240 firmware (< 3.14.1) • fronius primo 10.0-1 208-240 firmware (< 3.14.1) • fronius primo 11.4-1 208-240 firmware (< 3.14.1) • fronius primo 12.5-1 208-240 firmware (< 3.14.1) • fronius primo 15.0-1 208-240 firmware (< 3.14.1) • fronius primo 3.0-1 firmware (< 3.14.1) • fronius primo 3.5-1 firmware (< 3.14.1) • fronius primo 3.6-1 firmware (< 3.14.1) • fronius primo 3.8-1 208-240 firmware (< 3.14.1) • fronius primo 4.0-1 firmware (< 3.14.1) • fronius primo 4.6-1 firmware (< 3.14.1) • fronius primo 5.0-1 firmware (< 3.14.1) • fronius primo 5.0-1 208-240 firmware (< 3.14.1) • fronius primo 5.0-1 aus firmware (< 3.14.1) • fronius primo 5.0-1 sc firmware (< 3.14.1) • fronius primo 6.0-1 firmware (< 3.14.1) • fronius primo 6.0-1 208-240 firmware (< 3.14.1) • fronius primo 7.6-1 208-240 firmware (< 3.14.1) • fronius primo 8.2-1 firmware (< 3.14.1) • fronius primo 8.2-1 208-240 firmware (< 3.14.1) • fronius symo 10.0-3-m firmware (< 3.14.1) • fronius symo 10.0-3-m-os firmware (< 3.14.1) • fronius symo 10.0-3 208-240 firmware (< 3.14.1) • fronius symo 10.0-3 480 firmware (< 3.14.1) • fronius symo 12.0-3 208-240 firmware (< 3.14.1) • fronius symo 12.5-3-m firmware (< 3.14.1) • fronius symo 12.5-3 480 firmware (< 3.14.1) • fronius symo 15.0-3-m firmware (< 3.14.1) • fronius symo 15.0-3 107 firmware (< 3.14.1) • fronius symo 15.0-3 480 firmware (< 3.14.1) • fronius symo 17.5-3-m firmware (< 3.14.1) • fronius symo 17.5-3 480 firmware (< 3.14.1) • fronius symo 20.0-3-m firmware (< 3.14.1) • fronius symo 20.0-3 480 firmware (< 3.14.1) • fronius symo 22.7-3 480 firmware (< 3.14.1) • fronius symo 24.0-3 480 firmware (< 3.14.1) • fronius symo 3.0-3-m firmware (< 3.14.1) • fronius symo 3.0-3-s firmware (< 3.14.1) • fronius symo 3.7-3-m firmware (< 3.14.1) • fronius symo 3.7-3-s firmware (< 3.14.1) • fronius symo 4.5-3-m firmware (< 3.14.1) • fronius symo 4.5-3-s firmware (< 3.14.1) • fronius symo 5.0-3-m firmware (< 3.14.1) • fronius symo 6.0-3-m firmware (< 3.14.1) • fronius symo 7.0-3-m firmware (< 3.14.1) • fronius symo 8.2-3-m firmware (< 3.14.1) • fronius symo advanced 10.0-3 208-240 firmware (< 3.14.1) • fronius symo advanced 12.0-3 208-240 firmware (< 3.14.1) • fronius symo advanced 15.0-3 480 firmware (< 3.14.1) … and 6 more

Related

Weakness · CWE (1)

  • CWE-312 Cleartext Storage of Sensitive Information weakness

References