CVE-2024-23785

Name of the Vulnerable Software and Affected Versions Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 versions B0.1.9.1 and earlier

Description A cross-site request forgery issue allows a remote unauthenticated attacker to change the product settings.

Recommendations For versions B0.1.9.1 and earlier, update to a version later than B0.1.9.1 to resolve the issue. As a temporary workaround, consider restricting access to the Energy Management Controller with Cloud Services to minimize the risk of exploitation.