Critical severity9.8NVD Advisory· Published Dec 4, 2019· Updated Jun 17, 2026
CVE-2019-19228
CVE-2019-19228
Description
Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allow attackers to bypass authentication because the password for the today account is stored in the /tmp/web_users.conf file.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
68- Range: <3.14.1 (HM 1.12.1)
- Fronius/Solar Inverterdescription
- cpe:2.3:o:fronius:symo_hybrid_5.0-3-m_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:datamanager_box_2.0_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:galvo_1.5-1_208-240_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:galvo_2.0-1_208-240_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:galvo_2.5-1_208-240_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:galvo_3.1-1_208-240_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:primo_10.0-1_208-240_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:primo_11.4-1_208-240_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:primo_12.5-1_208-240_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:primo_15.0-1_208-240_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:primo_3.8-1_208-240_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:primo_5.0-1_208-240_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:primo_5.0-1_aus_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:primo_5.0-1_sc_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:primo_6.0-1_208-240_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:primo_7.6-1_208-240_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:primo_8.2-1_208-240_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:symo_10.0-3-m_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:symo_10.0-3-m-os_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:symo_10.0-3_208-240_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:symo_10.0-3_480_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:symo_12.0-3_208-240_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:symo_12.5-3-m_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:symo_12.5-3_480_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:symo_15.0-3-m_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:symo_15.0-3_107_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:symo_15.0-3_480_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:symo_17.5-3-m_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:symo_17.5-3_480_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:symo_20.0-3-m_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:symo_20.0-3_480_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:symo_22.7-3_480_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:symo_24.0-3_480_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:symo_advanced_10.0-3_208-240_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:symo_advanced_12.0-3_208-240_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:symo_advanced_15.0-3_480_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:symo_advanced_20.0-3_480_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:symo_advanced_22.7-3_480_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:symo_advanced_24.0-3_480_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:symo_hybrid_3.0-3-m_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
- cpe:2.3:o:fronius:symo_hybrid_4.0-3-m_firmware:*:*:*:*:*:*:*:*Range: <3.14.1
Patches
Vulnerability mechanics
References
3- packetstormsecurity.com/files/155562/Fronius-Solar-Inverter-Series-Insecure-Communication-Path-Traversal.htmlnvdExploitThird Party AdvisoryVDB Entry
- sec-consult.com/en/blog/advisories/multiple-vulnerabilites-in-fronius-solar-inverter-series-cve-2019-19229-cve-2019-19228/nvdExploitThird Party Advisory
- seclists.org/bugtraq/2019/Dec/5nvdExploitMailing ListThird Party Advisory
News mentions
0No linked articles in our index yet.