CVE-2024-8893

Summary

CVE-2024-8893 is a vulnerability affecting the GoodWe Technologies Co., Ltd. GW1500-XS inverter model 1.1.2.1. This issue involves the usage of hard-coded credentials, enabling anyone within physical range of the device to gain unauthorized access to the inverter's web interface via Wi-Fi. Consequently, attackers can potentially manipulate settings or steal sensitive information, posing a significant risk to the security of the renewable energy system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.