CVE-2024-8893CWE-798

Use of Hard-coded Credentials vulnerability in GoodWe Technologies Co., Ltd

High · published February 14, 2025

CVSS v3.1
7.3
EPSS
0%
Percentile
21.0
In the wild
Unconfirmed
What it is

Use of Hard-coded Credentials vulnerability in GoodWe Technologies Co., Ltd. GW1500‑XS allows anyone in physical proximity to the device to fully access the web interface of the inverter via Wi‑Fi.This issue affects GW1500‑XS: 1.1.2.1.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00295 · 21.0th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2025-02-14T16:33Z
EPSS history
Timeline
  • 14 FEB 16:33Z
    Use of Hard-coded Credentials vulnerability in GoodWe Technologies Co., Ltd
    cvelistv5