CVE-2024-8893

7.3 highEPSS 0.3%

High (7.3). EPSS 0.3% chance of exploitation in the next 30 days.

Use of Hard-coded Credentials vulnerability in GoodWe Technologies Co., Ltd. GW1500‑XS allows anyone in physical proximity to the device to fully access the web interface of the inverter via Wi‑Fi.This issue affects GW1500‑XS: 1.1.2.1.

Severity

CVSS 3.1

7.3 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 22% of CVEs (scores of 2026-10-31)
CWE: CWE-798
Published: 2025-02-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://os-s.net/publications/advisories/CVE-2024-8893.pdf

Check your stack JSON