CVE-2018-19023

Name: CVE-2018-19023
Creator: NVD / NIST
Published: 2019-01-25T20:29:00.33+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.75%

Last modified Jun 17, 2026

CVE-2018-19023 is a vulnerability of currently unknown severity. Hetronic Nova-M prior to verson r161 uses fixed codes that are reproducible by sniffing and re-transmission. This can lead to unauthorized replay of a command, spoofing of an arbitrary message, or keeping the controlled load in a permanent "stop" state.. EPSS estimates a 0.75% chance of exploitation in the next 30 days.

Description

Hetronic Nova-M prior to verson r161 uses fixed codes that are reproducible by sniffing and re-transmission. This can lead to unauthorized replay of a command, spoofing of an arbitrary message, or keeping the controlled load in a permanent "stop" state.

Metrics

EPSS Probability

0.75%

50.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Vendor	Product	Versions
Hetronic	Nova-M Firmware	< r161
Hetronic	Es-Can-Hl Firmware	< main_r1864
Hetronic	Bms-Hl Firmware	< main_r1175
Hetronic	Mlc Firmware	< main_r1600
Hetronic	Dc Mobile Firmware	< main_r515

References

http://www.securityfocus.com/bid/106448Third Party Advisory, VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-19-003-03Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/106448Third Party Advisory, VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-19-003-03Third Party Advisory, US Government Resource

Timeline

Published: Jan 25, 2019
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2018-19023?

How severe is CVE-2018-19023?

Severity scoring for CVE-2018-19023 is pending analysis. The EPSS model estimates a 0.75% probability of exploitation in the next 30 days.

How do I fix CVE-2018-19023?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2018-19023?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST