[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fmvRsbVCrQFvsTp5dcmo0T-bwDNAjoHCmrG_CxuChswo":3,"g5a-risk:CVE-2024-23785":139},{"success":4,"data":5,"meta":136},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":28,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":57,"references":58,"referencesCount":72,"weaknesses":73,"weaknessesCount":82,"isActivelyExploited":83,"cisaInfo":28,"otxData":28,"relatedBlogPosts":84,"seoMetadata":85,"configurations":110,"relatedVendorCves":134,"notableEvents":135},"CVE-2024-23785","What is CVE-2024-23785?","Cross-site request forgery vulnerability in Energy Management Controller with Cloud Services JH-RVB1 \u002FJH-RV11 Ver.B0.1.9.1 and earlier allows a remote unauthenticated attacker to change the product settings.","Cross-site request forgery vulnerability in Energy Management Controller with Cloud Services JH-RVB1 \u002FJH-RV11 Ver.B0.1.9.1 and earlier allows a remote unauth...","2024-02-14T10:15:08.663","2024-10-27T14:35:06.58",6.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":28,"CVSSMetricV2":28,"CVSSMetricV40":28},[16,31],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":29,"ImpactScore":30},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":26,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":23,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.1","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH","MEDIUM",null,2.8,3.6,{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":29,"ImpactScore":38},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":35,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":36,"ConfidentialityImpact":23,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":37,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":22,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:N\u002FI:L\u002FA:L","CHANGED",6.1,2.7,0.00357,[39,39,39,39,39,39,39],"Medium",[43,48,51,54],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"sharp","jh-rvb1_firmware","*","cpe:2.3:o:sharp:jh-rvb1_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":49,"version":46,"criteria":50,"vulnerable":4},"jh-rvb1","cpe:2.3:h:sharp:jh-rvb1:*:*:*:*:*:*:*:*",{"vendor":44,"product":52,"version":46,"criteria":53,"vulnerable":4},"jh-rv11_firmware","cpe:2.3:o:sharp:jh-rv11_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":55,"version":46,"criteria":56,"vulnerable":4},"jh-rv11","cpe:2.3:h:sharp:jh-rv11:*:*:*:*:*:*:*:*",4,[59,64,67],{"url":60,"source":61,"tags":62},"https:\u002F\u002Fjp.sharp\u002Fsupport\u002Ftaiyo\u002Finfo\u002FJVNVU94591337_en.pdf","Jp",[63],"Vendor Advisory",{"url":65,"source":61,"tags":66},"https:\u002F\u002Fjp.sharp\u002Fsupport\u002Ftaiyo\u002Finfo\u002FJVNVU94591337_jp.pdf",[63],{"url":68,"source":69,"tags":70},"https:\u002F\u002Fjvn.jp\u002Fen\u002Fvu\u002FJVNVU94591337\u002F","Jvn",[71],"Third Party Advisory",3,[74],{"id":75,"name":76,"description":77,"extendedDescription":78,"status":79,"abstraction":80,"structure":81},"CWE-352","Cross-Site Request Forgery (CSRF)","The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.","When a web server is designed to receive a request from a client without any mechanism for verifying that it was intentionally sent, then it might be possible for an attacker to trick a client into making an unintentional request to the web server which will be treated as an authentic request. This can be done via a URL, image load, XMLHttpRequest, etc. and can result in exposure of data or unintended code execution.","Stable","Compound","Composite",1,false,[],{"title":86,"metaDescription":87,"keywords":88,"canonicalUrl":89,"structuredData":90},"What is CVE-2024-23785? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2024-23785, a medium severity cyber security vulnerability from 2024. Cross-site request forgery vulnerability in Energy Manage...","CVE-2024-23785, CVE-2024-23785 vulnerability, CVE-2024-23785 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, sharp security, jh-rvb1_firmware vulnerability, jh-rvb1 vulnerability, jh-rv11_firmware vulnerability, jh-rv11 vulnerability","\u002Fwhat-is\u002Fcve-2024-23785",{"@context":91,"@type":92,"headline":86,"description":87,"datePublished":10,"dateModified":11,"author":93,"publisher":97,"about":101,"mainEntityOfPage":105,"articleSection":108,"keywords":109},"https:\u002F\u002Fschema.org","TechArticle",{"@type":94,"name":95,"url":96},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":94,"name":95,"url":96,"logo":98},{"@type":99,"url":100},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":102,"name":6,"description":103,"additionalType":104},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":106,"@id":107},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2024-23785","Cybersecurity","CVE-2024-23785, CVE-2024-23785 vulnerability, CVE-2024-23785 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[111,124],{"Operator":112,"Negate":28,"Nodes":113},"AND",[114,120],{"Operator":115,"Negate":28,"CPEMatch":116},"OR",[117],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":118,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":119},"B7EC16DF-21FB-473F-8F62-DDBF1C149A9B","b0.1.9.1",{"Operator":115,"Negate":28,"CPEMatch":121},[122],{"Vulnerable":28,"Criteria":50,"MatchCriteriaID":123,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"AE2814EB-D067-4920-A450-4F90431EA461",{"Operator":112,"Negate":28,"Nodes":125},[126,130],{"Operator":115,"Negate":28,"CPEMatch":127},[128],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":129,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":119},"E0A2340C-A0BC-4DD5-A120-F7041D76D776",{"Operator":115,"Negate":28,"CPEMatch":131},[132],{"Vulnerable":28,"Criteria":56,"MatchCriteriaID":133,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"C13F6906-8ED6-40DE-8B18-260B7765C4A9",[],[],{"lastModified":11,"cacheTime":137,"version":138},1793233277457,"2.0",{"score":140,"band":141,"action":142,"scoredAt":143},25,"Low","Monitor","2026-07-01T10:31:54.368304+00:00"]