Vulnerability Details CVE-2024-23786
Cross-site scripting vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker to execute an arbitrary script on the web browser of the user who is accessing the management page of the affected product.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.02
EPSS Ranking 82.7%
CVSS Severity
CVSS v3 Score 9.3
References
Products affected by CVE-2024-23786
-
cpe:2.3:h:sharp:jh-rv11:-
-
cpe:2.3:h:sharp:jh-rvb1:-
-
cpe:2.3:o:sharp:jh-rv11_firmware:-
-
cpe:2.3:o:sharp:jh-rv11_firmware:b0.1.9.1
-
cpe:2.3:o:sharp:jh-rvb1_firmware:-
-
cpe:2.3:o:sharp:jh-rvb1_firmware:b0.1.9.1