CVE-2024-23784

Name of the Vulnerable Software and Affected Versions Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 versions B0.1.9.1 and earlier

Description An improper access control issue exists, potentially allowing a network-adjacent unauthenticated attacker to obtain a username and its hashed password displayed on the management page of the affected product.

Recommendations For versions B0.1.9.1 and earlier, consider restricting access to the management page as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.