CVE-2019-19229

MEDIUM

Fronius Solar Inverter <3.14.1 - Path Traversal

Title source: llm

admincgi-bin/service.fcgi on Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allows action=download&filename= Directory Traversal.

Core 3

Core References

Exploit, Mailing List, Third Party Advisory x_refsource_misc

Exploit, Third Party Advisory x_refsource_misc

Exploit, Third Party Advisory, VDB Entry x_refsource_misc

CVSS v3 6.5

EPSS 0.0231

EPSS Percentile 81.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE

CWE-22

Status published

Products (50)

fronius/datamanager_box_2.0_firmware < 3.14.1

fronius/eco_25.0-3-s_firmware < 3.14.1

fronius/eco_27.0-3-s_firmware < 3.14.1

fronius/galvo_1.5-1_208-240_firmware < 3.14.1

fronius/galvo_1.5-1_firmware < 3.14.1

fronius/galvo_2.0-1_208-240_firmware < 3.14.1

fronius/galvo_2.0-1_firmware < 3.14.1

fronius/galvo_2.5-1_208-240_firmware < 3.14.1

fronius/galvo_2.5-1_firmware < 3.14.1

fronius/galvo_3.0-1_firmware < 3.14.1

... and 40 more

Published Dec 04, 2019

Tracked Since Feb 18, 2026