Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2019-19228 Details
Description
Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allow attackers to bypass authentication because the password for the today account is stored in the /tmp/web_users.conf file.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| http://packetstormsecurity.com/files/155562/Fronius-Solar-Inverter-Series-Insecure-Communication-Path-Traversal.html | CVE | ExploitThird Party AdvisoryVDB Entry |
| https://sec-consult.com/en/blog/advisories/multiple-vulnerabilites-in-fronius-solar-inverter-series-cve-2019-19229-cve-2019-19228/ | CVE | ExploitThird Party Advisory |
| https://seclists.org/bugtraq/2019/Dec/5 | CVE | ExploitMailing ListThird Party Advisory |
| http://packetstormsecurity.com/files/155562/Fronius-Solar-Inverter-Series-Insecure-Communication-Path-Traversal.html | [email protected] | ExploitThird Party AdvisoryVDB Entry |
| https://sec-consult.com/en/blog/advisories/multiple-vulnerabilites-in-fronius-solar-inverter-series-cve-2019-19229-cve-2019-19228/ | [email protected] | ExploitThird Party Advisory |
| https://seclists.org/bugtraq/2019/Dec/5 | [email protected] | ExploitMailing ListThird Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-312 | Cleartext Storage of Sensitive Information | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| fronius datamanager box 2.0 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius datamanager box 2.0 | All versions |
CPE
Remediation
| |
| fronius eco 25.0-3-s firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius eco 25.0-3-s | All versions |
CPE
Remediation
| |
| fronius eco 27.0-3-s firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius eco 27.0-3-s | All versions |
CPE
Remediation
| |
| fronius galvo 1.5-1 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius galvo 1.5-1 | All versions |
CPE
Remediation
| |
| fronius galvo 1.5-1 208-240 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius galvo 1.5-1 208-240 | All versions |
CPE
Remediation
| |
| fronius galvo 2.0-1 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius galvo 2.0-1 | All versions |
CPE
Remediation
| |
| fronius galvo 2.0-1 208-240 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius galvo 2.0-1 208-240 | All versions |
CPE
Remediation
| |
| fronius galvo 2.5-1 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius galvo 2.5-1 | All versions |
CPE
Remediation
| |
| fronius galvo 2.5-1 208-240 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius galvo 2.5-1 208-240 | All versions |
CPE
Remediation
| |
| fronius galvo 3.0-1 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius galvo 3.0-1 | All versions |
CPE
Remediation
| |
| fronius galvo 3.1-1 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius galvo 3.1-1 | All versions |
CPE
Remediation
| |
| fronius galvo 3.1-1 208-240 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius galvo 3.1-1 208-240 | All versions |
CPE
Remediation
| |
| fronius primo 10.0-1 208-240 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius primo 10.0-1 208-240 | All versions |
CPE
Remediation
| |
| fronius primo 11.4-1 208-240 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius primo 11.4-1 208-240 | All versions |
CPE
Remediation
| |
| fronius primo 12.5-1 208-240 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius primo 12.5-1 208-240 | All versions |
CPE
Remediation
| |
| fronius primo 15.0-1 208-240 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius primo 15.0-1 208-240 | All versions |
CPE
Remediation
| |
| fronius primo 3.0-1 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius primo 3.0-1 | All versions |
CPE
Remediation
| |
| fronius primo 3.5-1 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius primo 3.5-1 | All versions |
CPE
Remediation
| |
| fronius primo 3.6-1 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius primo 3.6-1 | All versions |
CPE
Remediation
| |
| fronius primo 3.8-1 208-240 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius primo 3.8-1 208-240 | All versions |
CPE
Remediation
| |
| fronius primo 4.0-1 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius primo 4.0-1 | All versions |
CPE
Remediation
| |
| fronius primo 4.6-1 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius primo 4.6-1 | All versions |
CPE
Remediation
| |
| fronius primo 5.0-1 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius primo 5.0-1 | All versions |
CPE
Remediation
| |
| fronius primo 5.0-1 208-240 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius primo 5.0-1 208-240 | All versions |
CPE
Remediation
| |
| fronius primo 5.0-1 aus firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius primo 5.0-1 aus | All versions |
CPE
Remediation
| |
| fronius primo 5.0-1 sc firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius primo 5.0-1 sc | All versions |
CPE
Remediation
| |
| fronius primo 6.0-1 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius primo 6.0-1 | All versions |
CPE
Remediation
| |
| fronius primo 6.0-1 208-240 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius primo 6.0-1 208-240 | All versions |
CPE
Remediation
| |
| fronius primo 7.6-1 208-240 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius primo 7.6-1 208-240 | All versions |
CPE
Remediation
| |
| fronius primo 8.2-1 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius primo 8.2-1 | All versions |
CPE
Remediation
| |
| fronius primo 8.2-1 208-240 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius primo 8.2-1 208-240 | All versions |
CPE
Remediation
| |
| fronius symo 10.0-3-m firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius symo 10.0-3-m | All versions |
CPE
Remediation
| |
| fronius symo 10.0-3-m-os firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius symo 10.0-3-m-os | All versions |
CPE
Remediation
| |
| fronius symo 10.0-3 208-240 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius symo 10.0-3 208-240 | All versions |
CPE
Remediation
| |
| fronius symo 10.0-3 480 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius symo 10.0-3 480 | All versions |
CPE
Remediation
| |
| fronius symo 12.0-3 208-240 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius symo 12.0-3 208-240 | All versions |
CPE
Remediation
| |
| fronius symo 12.5-3-m firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius symo 12.5-3-m | All versions |
CPE
Remediation
| |
| fronius symo 12.5-3 480 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius symo 12.5-3 480 | All versions |
CPE
Remediation
| |
| fronius symo 15.0-3-m firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius symo 15.0-3-m | All versions |
CPE
Remediation
| |
| fronius symo 15.0-3 107 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius symo 15.0-3 107 | All versions |
CPE
Remediation
| |
| fronius symo 15.0-3 480 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius symo 15.0-3 480 | All versions |
CPE
Remediation
| |
| fronius symo 17.5-3-m firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius symo 17.5-3-m | All versions |
CPE
Remediation
| |
| fronius symo 17.5-3 480 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius symo 17.5-3 480 | All versions |
CPE
Remediation
| |
| fronius symo 20.0-3-m firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius symo 20.0-3-m | All versions |
CPE
Remediation
| |
| fronius symo 20.0-3 480 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius symo 20.0-3 480 | All versions |
CPE
Remediation
| |
| fronius symo 22.7-3 480 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius symo 22.7-3 480 | All versions |
CPE
Remediation
| |
| fronius symo 24.0-3 480 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius symo 24.0-3 480 | All versions |
CPE
Remediation
| |
| fronius symo 3.0-3-m firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius symo 3.0-3-m | All versions |
CPE
Remediation
| |
| fronius symo 3.0-3-s firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius symo 3.0-3-s | All versions |
CPE
Remediation
| |
| fronius symo 3.7-3-m firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius symo 3.7-3-m | All versions |
CPE
Remediation
| |
| fronius symo 3.7-3-s firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius symo 3.7-3-s | All versions |
CPE
Remediation
| |
| fronius symo 4.5-3-m firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius symo 4.5-3-m | All versions |
CPE
Remediation
| |
| fronius symo 4.5-3-s firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius symo 4.5-3-s | All versions |
CPE
Remediation
| |
| fronius symo 5.0-3-m firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius symo 5.0-3-m | All versions |
CPE
Remediation
| |
| fronius symo 6.0-3-m firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius symo 6.0-3-m | All versions |
CPE
Remediation
| |
| fronius symo 7.0-3-m firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius symo 7.0-3-m | All versions |
CPE
Remediation
| |
| fronius symo 8.2-3-m firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius symo 8.2-3-m | All versions |
CPE
Remediation
| |
| fronius symo advanced 10.0-3 208-240 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius symo advanced 10.0-3 208-240 | All versions |
CPE
Remediation
| |
| fronius symo advanced 12.0-3 208-240 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius symo advanced 12.0-3 208-240 | All versions |
CPE
Remediation
| |
| fronius symo advanced 15.0-3 480 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius symo advanced 15.0-3 480 | All versions |
CPE
Remediation
| |
| fronius symo advanced 20.0-3 480 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius symo advanced 20.0-3 480 | All versions |
CPE
Remediation
| |
| fronius symo advanced 22.7-3 480 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius symo advanced 22.7-3 480 | All versions |
CPE
Remediation
| |
| fronius symo advanced 24.0-3 480 firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius symo advanced 24.0-3 480 | All versions |
CPE
Remediation
| |
| fronius symo hybrid 3.0-3-m firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius symo hybrid 3.0-3-m | All versions |
CPE
Remediation
| |
| fronius symo hybrid 4.0-3-m firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius symo hybrid 4.0-3-m | All versions |
CPE
Remediation
| |
| fronius symo hybrid 5.0-3-m firmware | < 3.14.1 |
CPE
Remediation
| |
| fronius symo hybrid 5.0-3-m | All versions |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Dec 16, 2019 | Initial Analysis | [email protected] |
| Dec 5, 2019 | CVE Modified | [email protected] |