CVEvulnerability

CVE-2024-8893

7.3 HIGH Published 2025-02-14 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2025-02-14
Last modified
2026-06-17
Assigner
a6d3dc9e-0591-4a13-bce7-0f5b31ff6158
CVSS 3.1 (a6d3dc9e-0591-4a13-bce7-0f5b31ff6158)
7.3 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weaknesses
CWE-798

Description

Use of Hard-coded Credentials vulnerability in GoodWe Technologies Co., Ltd. GW1500‑XS allows anyone in physical proximity to the device to fully access the web interface of the inverter via Wi‑Fi.This issue affects GW1500‑XS: 1.1.2.1.

Related

Weakness · CWE (1)

  • CWE-798 Use of Hard-coded Credentials weakness

References