CVE-2019-19229
admincgi-bin/service.fcgi on Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allows...
admincgi-bin/service.fcgi on Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allows action=download&filename= Directory Traversal.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
admincgi-bin/service.fcgi on Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allows action=download&filename= Directory Traversal.
- Record
CVE-2019-19229- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:P/I:N/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
CVE List No score
admincgi-bin/service.fcgi on Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allows action=download&filename= Directory Traversal.
- Record
CVE-2019-19229- Updated
- 2026-11-02
EUVDEUVD-2019-8855 No score
admincgi-bin/service.fcgi on Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allows action=download&filename= Directory Traversal.
- Record
EUVD-2019-8855- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f268-9fq5-h8qf No score
admincgi-bin/service.fcgi on Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allows...
admincgi-bin/service.fcgi on Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allows action=download&filename= Directory Traversal.
- Record
GHSA-f268-9fq5-h8qf- Updated
- 2026-11-02
Affected products
- fronius datamanager box 2.0 firmware
- fronius eco 25.0-3-s firmware
- fronius eco 27.0-3-s firmware
- fronius galvo 1.5-1 208-240 firmware
- fronius galvo 1.5-1 firmware
- fronius galvo 2.0-1 208-240 firmware
- fronius galvo 2.0-1 firmware
- fronius galvo 2.5-1 208-240 firmware
- fronius galvo 2.5-1 firmware
- fronius galvo 3.0-1 firmware
- fronius galvo 3.1-1 208-240 firmware
- fronius galvo 3.1-1 firmware
Show 54 moreShow less
- fronius primo 10.0-1 208-240 firmware
- fronius primo 11.4-1 208-240 firmware
- fronius primo 12.5-1 208-240 firmware
- fronius primo 15.0-1 208-240 firmware
- fronius primo 3.0-1 firmware
- fronius primo 3.5-1 firmware
- fronius primo 3.6-1 firmware
- fronius primo 3.8-1 208-240 firmware
- fronius primo 4.0-1 firmware
- fronius primo 4.6-1 firmware
- fronius primo 5.0-1 208-240 firmware
- fronius primo 5.0-1 aus firmware
- fronius primo 5.0-1 firmware
- fronius primo 5.0-1 sc firmware
- fronius primo 6.0-1 208-240 firmware
- fronius primo 6.0-1 firmware
- fronius primo 7.6-1 208-240 firmware
- fronius primo 8.2-1 208-240 firmware
- fronius primo 8.2-1 firmware
- fronius symo 10.0-3-m-os firmware
- fronius symo 10.0-3-m firmware
- fronius symo 10.0-3 208-240 firmware
- fronius symo 10.0-3 480 firmware
- fronius symo 12.0-3 208-240 firmware
- fronius symo 12.5-3-m firmware
- fronius symo 12.5-3 480 firmware
- fronius symo 15.0-3-m firmware
- fronius symo 15.0-3 107 firmware
- fronius symo 15.0-3 480 firmware
- fronius symo 17.5-3-m firmware
- fronius symo 17.5-3 480 firmware
- fronius symo 20.0-3-m firmware
- fronius symo 20.0-3 480 firmware
- fronius symo 22.7-3 480 firmware
- fronius symo 24.0-3 480 firmware
- fronius symo 3.0-3-m firmware
- fronius symo 3.0-3-s firmware
- fronius symo 3.7-3-m firmware
- fronius symo 3.7-3-s firmware
- fronius symo 4.5-3-m firmware
- fronius symo 4.5-3-s firmware
- fronius symo 5.0-3-m firmware
- fronius symo 6.0-3-m firmware
- fronius symo 7.0-3-m firmware
- fronius symo 8.2-3-m firmware
- fronius symo advanced 10.0-3 208-240 firmware
- fronius symo advanced 12.0-3 208-240 firmware
- fronius symo advanced 15.0-3 480 firmware
- fronius symo advanced 20.0-3 480 firmware
- fronius symo advanced 22.7-3 480 firmware
- fronius symo advanced 24.0-3 480 firmware
- fronius symo hybrid 3.0-3-m firmware
- fronius symo hybrid 4.0-3-m firmware
- fronius symo hybrid 5.0-3-m firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-19229 is a medium vulnerability (CVSS 6.5) in Fronius Datamanager Box 2.0 Firmware, published December 4, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.31%, the 83rd percentile. No source names a fixed version.
References
seclists.org/bugtraq/2019/Dec/5
sec-consult.com/en/blog/advisories/multiple-vulnerabilites-in-fronius-solar-inverter-series-cve-2019-19229-cve-2019-19228
packetstormsecurity.com/files/155562/Fronius-Solar-Inverter-Series-Insecure-Communication-Path-Traversal.html
nvd.nist.gov/vuln/detail/CVE-2019-19229
github.com/advisories/GHSA-f268-9fq5-h8qf