CVE-2019-19228
Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allow attackers to bypass authentication...
CVE-2019-19228 is a critical vulnerability (CVSS 9.8) in Fronius Datamanager Box 2.0 Firmware, published December 4, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.90%, the 79th percentile. No source names a fixed version.
- Severity
- 9.8 CriticalCVSS 3.1, NVD
- Exploit chance
- 1.90%EPSS, 79th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allow attackers to bypass authentication because the password for the today account is stored in the /tmp/web_users.conf file.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
Affected products
- fronius datamanager box 2.0 firmware
- fronius eco 25.0-3-s firmware
- fronius eco 27.0-3-s firmware
- fronius galvo 1.5-1 208-240 firmware
- fronius galvo 1.5-1 firmware
- fronius galvo 2.0-1 208-240 firmware
- fronius galvo 2.0-1 firmware
- fronius galvo 2.5-1 208-240 firmware
- fronius galvo 2.5-1 firmware
- fronius galvo 3.0-1 firmware
- fronius galvo 3.1-1 208-240 firmware
- fronius galvo 3.1-1 firmware
Show 54 moreShow less
- fronius primo 10.0-1 208-240 firmware
- fronius primo 11.4-1 208-240 firmware
- fronius primo 12.5-1 208-240 firmware
- fronius primo 15.0-1 208-240 firmware
- fronius primo 3.0-1 firmware
- fronius primo 3.5-1 firmware
- fronius primo 3.6-1 firmware
- fronius primo 3.8-1 208-240 firmware
- fronius primo 4.0-1 firmware
- fronius primo 4.6-1 firmware
- fronius primo 5.0-1 208-240 firmware
- fronius primo 5.0-1 aus firmware
- fronius primo 5.0-1 firmware
- fronius primo 5.0-1 sc firmware
- fronius primo 6.0-1 208-240 firmware
- fronius primo 6.0-1 firmware
- fronius primo 7.6-1 208-240 firmware
- fronius primo 8.2-1 208-240 firmware
- fronius primo 8.2-1 firmware
- fronius symo 10.0-3-m-os firmware
- fronius symo 10.0-3-m firmware
- fronius symo 10.0-3 208-240 firmware
- fronius symo 10.0-3 480 firmware
- fronius symo 12.0-3 208-240 firmware
- fronius symo 12.5-3-m firmware
- fronius symo 12.5-3 480 firmware
- fronius symo 15.0-3-m firmware
- fronius symo 15.0-3 107 firmware
- fronius symo 15.0-3 480 firmware
- fronius symo 17.5-3-m firmware
- fronius symo 17.5-3 480 firmware
- fronius symo 20.0-3-m firmware
- fronius symo 20.0-3 480 firmware
- fronius symo 22.7-3 480 firmware
- fronius symo 24.0-3 480 firmware
- fronius symo 3.0-3-m firmware
- fronius symo 3.0-3-s firmware
- fronius symo 3.7-3-m firmware
- fronius symo 3.7-3-s firmware
- fronius symo 4.5-3-m firmware
- fronius symo 4.5-3-s firmware
- fronius symo 5.0-3-m firmware
- fronius symo 6.0-3-m firmware
- fronius symo 7.0-3-m firmware
- fronius symo 8.2-3-m firmware
- fronius symo advanced 10.0-3 208-240 firmware
- fronius symo advanced 12.0-3 208-240 firmware
- fronius symo advanced 15.0-3 480 firmware
- fronius symo advanced 20.0-3 480 firmware
- fronius symo advanced 22.7-3 480 firmware
- fronius symo advanced 24.0-3 480 firmware
- fronius symo hybrid 3.0-3-m firmware
- fronius symo hybrid 4.0-3-m firmware
- fronius symo hybrid 5.0-3-m firmware
What each source reports
NVD Score used
Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allow attackers to bypass authentication because the password for the today account is stored in the /tmp/web_users.conf file.
- Record
CVE-2019-19228- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-312
- Updated
- 2026-11-02
CVE ListNo score
Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allow attackers to bypass authentication because the password for the today account is stored in the /tmp/web_users.conf file.
- Record
CVE-2019-19228- Updated
- 2026-11-02
EUVDEUVD-2019-8854No score
Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allow attackers to bypass authentication because the password for the today account is stored in the /tmp/web_users.conf file.
- Record
EUVD-2019-8854- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h3gx-q82j-vhq3No score
Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allow attackers to bypass authentication...
Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allow attackers to bypass authentication because the password for the today account is stored in the /tmp/web_users.conf file.
- Record
GHSA-h3gx-q82j-vhq3- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
seclists.org/bugtraq/2019/Dec/5
sec-consult.com/en/blog/advisories/multiple-vulnerabilites-in-fronius-solar-inverter-series-cve-2019-19229-cve-2019-19228
packetstormsecurity.com/files/155562/Fronius-Solar-Inverter-Series-Insecure-Communication-Path-Traversal.html
nvd.nist.gov/vuln/detail/CVE-2019-19228
github.com/advisories/GHSA-h3gx-q82j-vhq3