6.5

CVE-2019-19229

Exploit
admincgi-bin/service.fcgi on Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allows action=download&filename= Directory Traversal.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Fronius ≫ Datamanager Box 2.0 Firmware Version < 3.14.1
   Fronius ≫ Datamanager Box 2.0 Version -
Fronius ≫ Eco 25.0-3-s Firmware Version < 3.14.1
   Fronius ≫ Eco 25.0-3-s Version -
Fronius ≫ Eco 27.0-3-s Firmware Version < 3.14.1
   Fronius ≫ Eco 27.0-3-s Version -
Fronius ≫ Galvo 1.5-1 Firmware Version < 3.14.1
   Fronius ≫ Galvo 1.5-1 Version -
Fronius ≫ Galvo 1.5-1 208-240 Firmware Version < 3.14.1
   Fronius ≫ Galvo 1.5-1 208-240 Version -
Fronius ≫ Galvo 2.0-1 Firmware Version < 3.14.1
   Fronius ≫ Galvo 2.0-1 Version -
Fronius ≫ Galvo 2.0-1 208-240 Firmware Version < 3.14.1
   Fronius ≫ Galvo 2.0-1 208-240 Version -
Fronius ≫ Galvo 2.5-1 Firmware Version < 3.14.1
   Fronius ≫ Galvo 2.5-1 Version -
Fronius ≫ Galvo 2.5-1 208-240 Firmware Version < 3.14.1
   Fronius ≫ Galvo 2.5-1 208-240 Version -
Fronius ≫ Galvo 3.0-1 Firmware Version < 3.14.1
   Fronius ≫ Galvo 3.0-1 Version -
Fronius ≫ Galvo 3.1-1 Firmware Version < 3.14.1
   Fronius ≫ Galvo 3.1-1 Version -
Fronius ≫ Galvo 3.1-1 208-240 Firmware Version < 3.14.1
   Fronius ≫ Galvo 3.1-1 208-240 Version -
Fronius ≫ Primo 10.0-1 208-240 Firmware Version < 3.14.1
   Fronius ≫ Primo 10.0-1 208-240 Version -
Fronius ≫ Primo 11.4-1 208-240 Firmware Version < 3.14.1
   Fronius ≫ Primo 11.4-1 208-240 Version -
Fronius ≫ Primo 12.5-1 208-240 Firmware Version < 3.14.1
   Fronius ≫ Primo 12.5-1 208-240 Version -
Fronius ≫ Primo 15.0-1 208-240 Firmware Version < 3.14.1
   Fronius ≫ Primo 15.0-1 208-240 Version -
Fronius ≫ Primo 3.0-1 Firmware Version < 3.14.1
   Fronius ≫ Primo 3.0-1 Version -
Fronius ≫ Primo 3.5-1 Firmware Version < 3.14.1
   Fronius ≫ Primo 3.5-1 Version -
Fronius ≫ Primo 3.6-1 Firmware Version < 3.14.1
   Fronius ≫ Primo 3.6-1 Version -
Fronius ≫ Primo 3.8-1 208-240 Firmware Version < 3.14.1
   Fronius ≫ Primo 3.8-1 208-240 Version -
Fronius ≫ Primo 4.0-1 Firmware Version < 3.14.1
   Fronius ≫ Primo 4.0-1 Version -
Fronius ≫ Primo 4.6-1 Firmware Version < 3.14.1
   Fronius ≫ Primo 4.6-1 Version -
Fronius ≫ Primo 5.0-1 Firmware Version < 3.14.1
   Fronius ≫ Primo 5.0-1 Version -
Fronius ≫ Primo 5.0-1 208-240 Firmware Version < 3.14.1
   Fronius ≫ Primo 5.0-1 208-240 Version -
Fronius ≫ Primo 5.0-1 Aus Firmware Version < 3.14.1
   Fronius ≫ Primo 5.0-1 Aus Version -
Fronius ≫ Primo 5.0-1 Sc Firmware Version < 3.14.1
   Fronius ≫ Primo 5.0-1 Sc Version -
Fronius ≫ Primo 6.0-1 Firmware Version < 3.14.1
   Fronius ≫ Primo 6.0-1 Version -
Fronius ≫ Primo 6.0-1 208-240 Firmware Version < 3.14.1
   Fronius ≫ Primo 6.0-1 208-240 Version -
Fronius ≫ Primo 7.6-1 208-240 Firmware Version < 3.14.1
   Fronius ≫ Primo 7.6-1 208-240 Version -
Fronius ≫ Primo 8.2-1 Firmware Version < 3.14.1
   Fronius ≫ Primo 8.2-1 Version -
Fronius ≫ Primo 8.2-1 208-240 Firmware Version < 3.14.1
   Fronius ≫ Primo 8.2-1 208-240 Version -
Fronius ≫ Symo 10.0-3-m Firmware Version < 3.14.1
   Fronius ≫ Symo 10.0-3-m Version -
Fronius ≫ Symo 10.0-3-m-os Firmware Version < 3.14.1
   Fronius ≫ Symo 10.0-3-m-os Version -
Fronius ≫ Symo 10.0-3 208-240 Firmware Version < 3.14.1
   Fronius ≫ Symo 10.0-3 208-240 Version -
Fronius ≫ Symo 10.0-3 480 Firmware Version < 3.14.1
   Fronius ≫ Symo 10.0-3 480 Version -
Fronius ≫ Symo 12.0-3 208-240 Firmware Version < 3.14.1
   Fronius ≫ Symo 12.0-3 208-240 Version -
Fronius ≫ Symo 12.5-3-m Firmware Version < 3.14.1
   Fronius ≫ Symo 12.5-3-m Version -
Fronius ≫ Symo 12.5-3 480 Firmware Version < 3.14.1
   Fronius ≫ Symo 12.5-3 480 Version -
Fronius ≫ Symo 15.0-3-m Firmware Version < 3.14.1
   Fronius ≫ Symo 15.0-3-m Version -
Fronius ≫ Symo 15.0-3 107 Firmware Version < 3.14.1
   Fronius ≫ Symo 15.0-3 107 Version -
Fronius ≫ Symo 15.0-3 480 Firmware Version < 3.14.1
   Fronius ≫ Symo 15.0-3 480 Version -
Fronius ≫ Symo 17.5-3-m Firmware Version < 3.14.1
   Fronius ≫ Symo 17.5-3-m Version -
Fronius ≫ Symo 17.5-3 480 Firmware Version < 3.14.1
   Fronius ≫ Symo 17.5-3 480 Version -
Fronius ≫ Symo 20.0-3-m Firmware Version < 3.14.1
   Fronius ≫ Symo 20.0-3-m Version -
Fronius ≫ Symo 20.0-3 480 Firmware Version < 3.14.1
   Fronius ≫ Symo 20.0-3 480 Version -
Fronius ≫ Symo 22.7-3 480 Firmware Version < 3.14.1
   Fronius ≫ Symo 22.7-3 480 Version -
Fronius ≫ Symo 24.0-3 480 Firmware Version < 3.14.1
   Fronius ≫ Symo 24.0-3 480 Version -
Fronius ≫ Symo 3.0-3-m Firmware Version < 3.14.1
   Fronius ≫ Symo 3.0-3-m Version -
Fronius ≫ Symo 3.0-3-s Firmware Version < 3.14.1
   Fronius ≫ Symo 3.0-3-s Version -
Fronius ≫ Symo 3.7-3-m Firmware Version < 3.14.1
   Fronius ≫ Symo 3.7-3-m Version -
Fronius ≫ Symo 3.7-3-s Firmware Version < 3.14.1
   Fronius ≫ Symo 3.7-3-s Version -
Fronius ≫ Symo 4.5-3-m Firmware Version < 3.14.1
   Fronius ≫ Symo 4.5-3-m Version -
Fronius ≫ Symo 4.5-3-s Firmware Version < 3.14.1
   Fronius ≫ Symo 4.5-3-s Version -
Fronius ≫ Symo 5.0-3-m Firmware Version < 3.14.1
   Fronius ≫ Symo 5.0-3-m Version -
Fronius ≫ Symo 6.0-3-m Firmware Version < 3.14.1
   Fronius ≫ Symo 6.0-3-m Version -
Fronius ≫ Symo 7.0-3-m Firmware Version < 3.14.1
   Fronius ≫ Symo 7.0-3-m Version -
Fronius ≫ Symo 8.2-3-m Firmware Version < 3.14.1
   Fronius ≫ Symo 8.2-3-m Version -
Fronius ≫ Symo Hybrid 3.0-3-m Firmware Version < 3.14.1
   Fronius ≫ Symo Hybrid 3.0-3-m Version -
Fronius ≫ Symo Hybrid 4.0-3-m Firmware Version < 3.14.1
   Fronius ≫ Symo Hybrid 4.0-3-m Version -
Fronius ≫ Symo Hybrid 5.0-3-m Firmware Version < 3.14.1
   Fronius ≫ Symo Hybrid 5.0-3-m Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.31% 0.812
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NIST 4 8 2.9
AV:N/AC:L/Au:S/C:P/I:N/A:N
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

http://packetstormsecurity.com/files/155562/Fronius-Solar-Inverter-Series-Insecure-Communication-Path-Traversal.html
Third Party Advisory
Exploit
VDB Entry
https://sec-consult.com/en/blog/advisories/multiple-vulnerabilites-in-fronius-solar-inverter-series-cve-2019-19229-cve-2019-19228/
Third Party Advisory
Exploit
https://seclists.org/bugtraq/2019/Dec/5
Third Party Advisory
Exploit
Mailing List