CVE-2019-19228
Summary
| CVE | CVE-2019-19228 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-12-04 19:15:00 UTC |
| Updated | 2019-12-16 14:10:00 UTC |
| Description | Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allow attackers to bypass authentication because the password for the today account is stored in the /tmp/web_users.conf file. |
Risk And Classification
Problem Types: CWE-312
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Fronius | Datamanager Box 2.0 | - | All | All | All |
| Hardware | Fronius | Datamanager Box 2.0 | - | All | All | All |
| Operating System | Fronius | Datamanager Box 2.0 Firmware | All | All | All | All |
| Operating System | Fronius | Datamanager Box 2.0 Firmware | All | All | All | All |
| Hardware | Fronius | Eco 25.0-3-s | - | All | All | All |
| Hardware | Fronius | Eco 25.0-3-s | - | All | All | All |
| Operating System | Fronius | Eco 25.0-3-s Firmware | All | All | All | All |
| Operating System | Fronius | Eco 25.0-3-s Firmware | All | All | All | All |
| Hardware | Fronius | Eco 27.0-3-s | - | All | All | All |
| Hardware | Fronius | Eco 27.0-3-s | - | All | All | All |
| Operating System | Fronius | Eco 27.0-3-s Firmware | All | All | All | All |
| Operating System | Fronius | Eco 27.0-3-s Firmware | All | All | All | All |
| Hardware | Fronius | Galvo 1.5-1 | - | All | All | All |
| Hardware | Fronius | Galvo 1.5-1 | - | All | All | All |
| Hardware | Fronius | Galvo 1.5-1 208-240 | - | All | All | All |
| Hardware | Fronius | Galvo 1.5-1 208-240 | - | All | All | All |
| Operating System | Fronius | Galvo 1.5-1 208-240 Firmware | All | All | All | All |
| Operating System | Fronius | Galvo 1.5-1 208-240 Firmware | All | All | All | All |
| Operating System | Fronius | Galvo 1.5-1 Firmware | All | All | All | All |
| Operating System | Fronius | Galvo 1.5-1 Firmware | All | All | All | All |
| Hardware | Fronius | Galvo 2.0-1 | - | All | All | All |
| Hardware | Fronius | Galvo 2.0-1 | - | All | All | All |
| Hardware | Fronius | Galvo 2.0-1 208-240 | - | All | All | All |
| Hardware | Fronius | Galvo 2.0-1 208-240 | - | All | All | All |
| Operating System | Fronius | Galvo 2.0-1 208-240 Firmware | All | All | All | All |
| Operating System | Fronius | Galvo 2.0-1 208-240 Firmware | All | All | All | All |
| Operating System | Fronius | Galvo 2.0-1 Firmware | All | All | All | All |
| Operating System | Fronius | Galvo 2.0-1 Firmware | All | All | All | All |
| Hardware | Fronius | Galvo 2.5-1 | - | All | All | All |
| Hardware | Fronius | Galvo 2.5-1 | - | All | All | All |
| Hardware | Fronius | Galvo 2.5-1 208-240 | - | All | All | All |
| Hardware | Fronius | Galvo 2.5-1 208-240 | - | All | All | All |
| Operating System | Fronius | Galvo 2.5-1 208-240 Firmware | All | All | All | All |
| Operating System | Fronius | Galvo 2.5-1 208-240 Firmware | All | All | All | All |
| Operating System | Fronius | Galvo 2.5-1 Firmware | All | All | All | All |
| Operating System | Fronius | Galvo 2.5-1 Firmware | All | All | All | All |
| Hardware | Fronius | Galvo 3.0-1 | - | All | All | All |
| Hardware | Fronius | Galvo 3.0-1 | - | All | All | All |
| Operating System | Fronius | Galvo 3.0-1 Firmware | All | All | All | All |
| Operating System | Fronius | Galvo 3.0-1 Firmware | All | All | All | All |
| Hardware | Fronius | Galvo 3.1-1 | - | All | All | All |
| Hardware | Fronius | Galvo 3.1-1 | - | All | All | All |
| Hardware | Fronius | Galvo 3.1-1 208-240 | - | All | All | All |
| Hardware | Fronius | Galvo 3.1-1 208-240 | - | All | All | All |
| Operating System | Fronius | Galvo 3.1-1 208-240 Firmware | All | All | All | All |
| Operating System | Fronius | Galvo 3.1-1 208-240 Firmware | All | All | All | All |
| Operating System | Fronius | Galvo 3.1-1 Firmware | All | All | All | All |
| Operating System | Fronius | Galvo 3.1-1 Firmware | All | All | All | All |
| Hardware | Fronius | Primo 10.0-1 208-240 | - | All | All | All |
| Hardware | Fronius | Primo 10.0-1 208-240 | - | All | All | All |
| Operating System | Fronius | Primo 10.0-1 208-240 Firmware | All | All | All | All |
| Operating System | Fronius | Primo 10.0-1 208-240 Firmware | All | All | All | All |
| Hardware | Fronius | Primo 11.4-1 208-240 | - | All | All | All |
| Hardware | Fronius | Primo 11.4-1 208-240 | - | All | All | All |
| Operating System | Fronius | Primo 11.4-1 208-240 Firmware | All | All | All | All |
| Operating System | Fronius | Primo 11.4-1 208-240 Firmware | All | All | All | All |
| Hardware | Fronius | Primo 12.5-1 208-240 | - | All | All | All |
| Hardware | Fronius | Primo 12.5-1 208-240 | - | All | All | All |
| Operating System | Fronius | Primo 12.5-1 208-240 Firmware | All | All | All | All |
| Operating System | Fronius | Primo 12.5-1 208-240 Firmware | All | All | All | All |
| Hardware | Fronius | Primo 15.0-1 208-240 | - | All | All | All |
| Hardware | Fronius | Primo 15.0-1 208-240 | - | All | All | All |
| Operating System | Fronius | Primo 15.0-1 208-240 Firmware | All | All | All | All |
| Operating System | Fronius | Primo 15.0-1 208-240 Firmware | All | All | All | All |
| Hardware | Fronius | Primo 3.0-1 | - | All | All | All |
| Hardware | Fronius | Primo 3.0-1 | - | All | All | All |
| Operating System | Fronius | Primo 3.0-1 Firmware | All | All | All | All |
| Operating System | Fronius | Primo 3.0-1 Firmware | All | All | All | All |
| Hardware | Fronius | Primo 3.5-1 | - | All | All | All |
| Hardware | Fronius | Primo 3.5-1 | - | All | All | All |
| Operating System | Fronius | Primo 3.5-1 Firmware | All | All | All | All |
| Operating System | Fronius | Primo 3.5-1 Firmware | All | All | All | All |
| Hardware | Fronius | Primo 3.6-1 | - | All | All | All |
| Hardware | Fronius | Primo 3.6-1 | - | All | All | All |
| Operating System | Fronius | Primo 3.6-1 Firmware | All | All | All | All |
| Operating System | Fronius | Primo 3.6-1 Firmware | All | All | All | All |
| Hardware | Fronius | Primo 3.8-1 208-240 | - | All | All | All |
| Hardware | Fronius | Primo 3.8-1 208-240 | - | All | All | All |
| Operating System | Fronius | Primo 3.8-1 208-240 Firmware | All | All | All | All |
| Operating System | Fronius | Primo 3.8-1 208-240 Firmware | All | All | All | All |
| Hardware | Fronius | Primo 4.0-1 | - | All | All | All |
| Hardware | Fronius | Primo 4.0-1 | - | All | All | All |
| Operating System | Fronius | Primo 4.0-1 Firmware | All | All | All | All |
| Operating System | Fronius | Primo 4.0-1 Firmware | All | All | All | All |
| Hardware | Fronius | Primo 4.6-1 | - | All | All | All |
| Hardware | Fronius | Primo 4.6-1 | - | All | All | All |
| Operating System | Fronius | Primo 4.6-1 Firmware | All | All | All | All |
| Operating System | Fronius | Primo 4.6-1 Firmware | All | All | All | All |
| Hardware | Fronius | Primo 5.0-1 | - | All | All | All |
| Hardware | Fronius | Primo 5.0-1 | - | All | All | All |
| Hardware | Fronius | Primo 5.0-1 208-240 | - | All | All | All |
| Hardware | Fronius | Primo 5.0-1 208-240 | - | All | All | All |
| Operating System | Fronius | Primo 5.0-1 208-240 Firmware | All | All | All | All |
| Operating System | Fronius | Primo 5.0-1 208-240 Firmware | All | All | All | All |
| Hardware | Fronius | Primo 5.0-1 Aus | - | All | All | All |
| Hardware | Fronius | Primo 5.0-1 Aus | - | All | All | All |
| Operating System | Fronius | Primo 5.0-1 Aus Firmware | All | All | All | All |
| Operating System | Fronius | Primo 5.0-1 Aus Firmware | All | All | All | All |
| Operating System | Fronius | Primo 5.0-1 Firmware | All | All | All | All |
| Operating System | Fronius | Primo 5.0-1 Firmware | All | All | All | All |
| Hardware | Fronius | Primo 5.0-1 Sc | - | All | All | All |
| Hardware | Fronius | Primo 5.0-1 Sc | - | All | All | All |
| Operating System | Fronius | Primo 5.0-1 Sc Firmware | All | All | All | All |
| Operating System | Fronius | Primo 5.0-1 Sc Firmware | All | All | All | All |
| Hardware | Fronius | Primo 6.0-1 | - | All | All | All |
| Hardware | Fronius | Primo 6.0-1 | - | All | All | All |
| Hardware | Fronius | Primo 6.0-1 208-240 | - | All | All | All |
| Hardware | Fronius | Primo 6.0-1 208-240 | - | All | All | All |
| Operating System | Fronius | Primo 6.0-1 208-240 Firmware | All | All | All | All |
| Operating System | Fronius | Primo 6.0-1 208-240 Firmware | All | All | All | All |
| Operating System | Fronius | Primo 6.0-1 Firmware | All | All | All | All |
| Operating System | Fronius | Primo 6.0-1 Firmware | All | All | All | All |
| Hardware | Fronius | Primo 7.6-1 208-240 | - | All | All | All |
| Hardware | Fronius | Primo 7.6-1 208-240 | - | All | All | All |
| Operating System | Fronius | Primo 7.6-1 208-240 Firmware | All | All | All | All |
| Operating System | Fronius | Primo 7.6-1 208-240 Firmware | All | All | All | All |
| Hardware | Fronius | Primo 8.2-1 | - | All | All | All |
| Hardware | Fronius | Primo 8.2-1 | - | All | All | All |
| Hardware | Fronius | Primo 8.2-1 208-240 | - | All | All | All |
| Hardware | Fronius | Primo 8.2-1 208-240 | - | All | All | All |
| Operating System | Fronius | Primo 8.2-1 208-240 Firmware | All | All | All | All |
| Operating System | Fronius | Primo 8.2-1 208-240 Firmware | All | All | All | All |
| Operating System | Fronius | Primo 8.2-1 Firmware | All | All | All | All |
| Operating System | Fronius | Primo 8.2-1 Firmware | All | All | All | All |
| Hardware | Fronius | Symo 10.0-3-m | - | All | All | All |
| Hardware | Fronius | Symo 10.0-3-m | - | All | All | All |
| Hardware | Fronius | Symo 10.0-3-m-os | - | All | All | All |
| Hardware | Fronius | Symo 10.0-3-m-os | - | All | All | All |
| Operating System | Fronius | Symo 10.0-3-m-os Firmware | All | All | All | All |
| Operating System | Fronius | Symo 10.0-3-m-os Firmware | All | All | All | All |
| Operating System | Fronius | Symo 10.0-3-m Firmware | All | All | All | All |
| Operating System | Fronius | Symo 10.0-3-m Firmware | All | All | All | All |
| Hardware | Fronius | Symo 10.0-3 208-240 | - | All | All | All |
| Hardware | Fronius | Symo 10.0-3 208-240 | - | All | All | All |
| Operating System | Fronius | Symo 10.0-3 208-240 Firmware | All | All | All | All |
| Operating System | Fronius | Symo 10.0-3 208-240 Firmware | All | All | All | All |
| Hardware | Fronius | Symo 10.0-3 480 | - | All | All | All |
| Hardware | Fronius | Symo 10.0-3 480 | - | All | All | All |
| Operating System | Fronius | Symo 10.0-3 480 Firmware | All | All | All | All |
| Operating System | Fronius | Symo 10.0-3 480 Firmware | All | All | All | All |
| Hardware | Fronius | Symo 12.0-3 208-240 | - | All | All | All |
| Hardware | Fronius | Symo 12.0-3 208-240 | - | All | All | All |
| Operating System | Fronius | Symo 12.0-3 208-240 Firmware | All | All | All | All |
| Operating System | Fronius | Symo 12.0-3 208-240 Firmware | All | All | All | All |
| Hardware | Fronius | Symo 12.5-3-m | - | All | All | All |
| Hardware | Fronius | Symo 12.5-3-m | - | All | All | All |
| Operating System | Fronius | Symo 12.5-3-m Firmware | All | All | All | All |
| Operating System | Fronius | Symo 12.5-3-m Firmware | All | All | All | All |
| Hardware | Fronius | Symo 12.5-3 480 | - | All | All | All |
| Hardware | Fronius | Symo 12.5-3 480 | - | All | All | All |
| Operating System | Fronius | Symo 12.5-3 480 Firmware | All | All | All | All |
| Operating System | Fronius | Symo 12.5-3 480 Firmware | All | All | All | All |
| Hardware | Fronius | Symo 15.0-3-m | - | All | All | All |
| Hardware | Fronius | Symo 15.0-3-m | - | All | All | All |
| Operating System | Fronius | Symo 15.0-3-m Firmware | All | All | All | All |
| Operating System | Fronius | Symo 15.0-3-m Firmware | All | All | All | All |
| Hardware | Fronius | Symo 15.0-3 107 | - | All | All | All |
| Hardware | Fronius | Symo 15.0-3 107 | - | All | All | All |
| Operating System | Fronius | Symo 15.0-3 107 Firmware | All | All | All | All |
| Operating System | Fronius | Symo 15.0-3 107 Firmware | All | All | All | All |
| Hardware | Fronius | Symo 15.0-3 480 | - | All | All | All |
| Hardware | Fronius | Symo 15.0-3 480 | - | All | All | All |
| Operating System | Fronius | Symo 15.0-3 480 Firmware | All | All | All | All |
| Operating System | Fronius | Symo 15.0-3 480 Firmware | All | All | All | All |
| Hardware | Fronius | Symo 17.5-3-m | - | All | All | All |
| Hardware | Fronius | Symo 17.5-3-m | - | All | All | All |
| Operating System | Fronius | Symo 17.5-3-m Firmware | All | All | All | All |
| Operating System | Fronius | Symo 17.5-3-m Firmware | All | All | All | All |
| Hardware | Fronius | Symo 17.5-3 480 | - | All | All | All |
| Hardware | Fronius | Symo 17.5-3 480 | - | All | All | All |
| Operating System | Fronius | Symo 17.5-3 480 Firmware | All | All | All | All |
| Operating System | Fronius | Symo 17.5-3 480 Firmware | All | All | All | All |
| Hardware | Fronius | Symo 20.0-3-m | - | All | All | All |
| Hardware | Fronius | Symo 20.0-3-m | - | All | All | All |
| Operating System | Fronius | Symo 20.0-3-m Firmware | All | All | All | All |
| Operating System | Fronius | Symo 20.0-3-m Firmware | All | All | All | All |
| Hardware | Fronius | Symo 20.0-3 480 | - | All | All | All |
| Hardware | Fronius | Symo 20.0-3 480 | - | All | All | All |
| Operating System | Fronius | Symo 20.0-3 480 Firmware | All | All | All | All |
| Operating System | Fronius | Symo 20.0-3 480 Firmware | All | All | All | All |
| Hardware | Fronius | Symo 22.7-3 480 | - | All | All | All |
| Hardware | Fronius | Symo 22.7-3 480 | - | All | All | All |
| Operating System | Fronius | Symo 22.7-3 480 Firmware | All | All | All | All |
| Operating System | Fronius | Symo 22.7-3 480 Firmware | All | All | All | All |
| Hardware | Fronius | Symo 24.0-3 480 | - | All | All | All |
| Hardware | Fronius | Symo 24.0-3 480 | - | All | All | All |
| Operating System | Fronius | Symo 24.0-3 480 Firmware | All | All | All | All |
| Operating System | Fronius | Symo 24.0-3 480 Firmware | All | All | All | All |
| Hardware | Fronius | Symo 3.0-3-m | - | All | All | All |
| Hardware | Fronius | Symo 3.0-3-m | - | All | All | All |
| Operating System | Fronius | Symo 3.0-3-m Firmware | All | All | All | All |
| Operating System | Fronius | Symo 3.0-3-m Firmware | All | All | All | All |
| Hardware | Fronius | Symo 3.0-3-s | - | All | All | All |
| Hardware | Fronius | Symo 3.0-3-s | - | All | All | All |
| Operating System | Fronius | Symo 3.0-3-s Firmware | All | All | All | All |
| Operating System | Fronius | Symo 3.0-3-s Firmware | All | All | All | All |
| Hardware | Fronius | Symo 3.7-3-m | - | All | All | All |
| Hardware | Fronius | Symo 3.7-3-m | - | All | All | All |
| Operating System | Fronius | Symo 3.7-3-m Firmware | All | All | All | All |
| Operating System | Fronius | Symo 3.7-3-m Firmware | All | All | All | All |
| Hardware | Fronius | Symo 3.7-3-s | - | All | All | All |
| Hardware | Fronius | Symo 3.7-3-s | - | All | All | All |
| Operating System | Fronius | Symo 3.7-3-s Firmware | All | All | All | All |
| Operating System | Fronius | Symo 3.7-3-s Firmware | All | All | All | All |
| Hardware | Fronius | Symo 4.5-3-m | - | All | All | All |
| Hardware | Fronius | Symo 4.5-3-m | - | All | All | All |
| Operating System | Fronius | Symo 4.5-3-m Firmware | All | All | All | All |
| Operating System | Fronius | Symo 4.5-3-m Firmware | All | All | All | All |
| Hardware | Fronius | Symo 4.5-3-s | - | All | All | All |
| Hardware | Fronius | Symo 4.5-3-s | - | All | All | All |
| Operating System | Fronius | Symo 4.5-3-s Firmware | All | All | All | All |
| Operating System | Fronius | Symo 4.5-3-s Firmware | All | All | All | All |
| Hardware | Fronius | Symo 5.0-3-m | - | All | All | All |
| Hardware | Fronius | Symo 5.0-3-m | - | All | All | All |
| Operating System | Fronius | Symo 5.0-3-m Firmware | All | All | All | All |
| Operating System | Fronius | Symo 5.0-3-m Firmware | All | All | All | All |
| Hardware | Fronius | Symo 6.0-3-m | - | All | All | All |
| Hardware | Fronius | Symo 6.0-3-m | - | All | All | All |
| Operating System | Fronius | Symo 6.0-3-m Firmware | All | All | All | All |
| Operating System | Fronius | Symo 6.0-3-m Firmware | All | All | All | All |
| Hardware | Fronius | Symo 7.0-3-m | - | All | All | All |
| Hardware | Fronius | Symo 7.0-3-m | - | All | All | All |
| Operating System | Fronius | Symo 7.0-3-m Firmware | All | All | All | All |
| Operating System | Fronius | Symo 7.0-3-m Firmware | All | All | All | All |
| Hardware | Fronius | Symo 8.2-3-m | - | All | All | All |
| Hardware | Fronius | Symo 8.2-3-m | - | All | All | All |
| Operating System | Fronius | Symo 8.2-3-m Firmware | All | All | All | All |
| Operating System | Fronius | Symo 8.2-3-m Firmware | All | All | All | All |
| Hardware | Fronius | Symo Advanced 10.0-3 208-240 | - | All | All | All |
| Hardware | Fronius | Symo Advanced 10.0-3 208-240 | - | All | All | All |
| Operating System | Fronius | Symo Advanced 10.0-3 208-240 Firmware | All | All | All | All |
| Operating System | Fronius | Symo Advanced 10.0-3 208-240 Firmware | All | All | All | All |
| Hardware | Fronius | Symo Advanced 12.0-3 208-240 | - | All | All | All |
| Hardware | Fronius | Symo Advanced 12.0-3 208-240 | - | All | All | All |
| Operating System | Fronius | Symo Advanced 12.0-3 208-240 Firmware | All | All | All | All |
| Operating System | Fronius | Symo Advanced 12.0-3 208-240 Firmware | All | All | All | All |
| Hardware | Fronius | Symo Advanced 15.0-3 480 | - | All | All | All |
| Hardware | Fronius | Symo Advanced 15.0-3 480 | - | All | All | All |
| Operating System | Fronius | Symo Advanced 15.0-3 480 Firmware | All | All | All | All |
| Operating System | Fronius | Symo Advanced 15.0-3 480 Firmware | All | All | All | All |
| Hardware | Fronius | Symo Advanced 20.0-3 480 | - | All | All | All |
| Hardware | Fronius | Symo Advanced 20.0-3 480 | - | All | All | All |
| Operating System | Fronius | Symo Advanced 20.0-3 480 Firmware | All | All | All | All |
| Operating System | Fronius | Symo Advanced 20.0-3 480 Firmware | All | All | All | All |
| Hardware | Fronius | Symo Advanced 22.7-3 480 | - | All | All | All |
| Hardware | Fronius | Symo Advanced 22.7-3 480 | - | All | All | All |
| Operating System | Fronius | Symo Advanced 22.7-3 480 Firmware | All | All | All | All |
| Operating System | Fronius | Symo Advanced 22.7-3 480 Firmware | All | All | All | All |
| Hardware | Fronius | Symo Advanced 24.0-3 480 | - | All | All | All |
| Hardware | Fronius | Symo Advanced 24.0-3 480 | - | All | All | All |
| Operating System | Fronius | Symo Advanced 24.0-3 480 Firmware | All | All | All | All |
| Operating System | Fronius | Symo Advanced 24.0-3 480 Firmware | All | All | All | All |
| Hardware | Fronius | Symo Hybrid 3.0-3-m | - | All | All | All |
| Hardware | Fronius | Symo Hybrid 3.0-3-m | - | All | All | All |
| Operating System | Fronius | Symo Hybrid 3.0-3-m Firmware | All | All | All | All |
| Operating System | Fronius | Symo Hybrid 3.0-3-m Firmware | All | All | All | All |
| Hardware | Fronius | Symo Hybrid 4.0-3-m | - | All | All | All |
| Hardware | Fronius | Symo Hybrid 4.0-3-m | - | All | All | All |
| Operating System | Fronius | Symo Hybrid 4.0-3-m Firmware | All | All | All | All |
| Operating System | Fronius | Symo Hybrid 4.0-3-m Firmware | All | All | All | All |
| Hardware | Fronius | Symo Hybrid 5.0-3-m | - | All | All | All |
| Hardware | Fronius | Symo Hybrid 5.0-3-m | - | All | All | All |
| Operating System | Fronius | Symo Hybrid 5.0-3-m Firmware | All | All | All | All |
| Operating System | Fronius | Symo Hybrid 5.0-3-m Firmware | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Multiple vulnerabilites in Fronius Solar Inverter Series (CVE-2019-19229, CVE-2019-19228) – SEC Consult | MISC | sec-consult.com | Exploit, Third Party Advisory |
| Fronius Solar Inverter Series Insecure Communication / Path Traversal ≈ Packet Storm | MISC | packetstormsecurity.com | Exploit, Third Party Advisory, VDB Entry |
| Bugtraq: SEC Consult SA-20191203-0 :: Multiple vulnerabilites in Fronius Solar Inverter Series | MISC | seclists.org | Exploit, Mailing List, Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.