What is CVE-2024-8893?

CVE-2024-8893 is a high-severity vulnerability in Goodwe Technologies Co., Ltd. Gw1500‑xs, classified under Use of Hard-coded Credentials. CVSS score: 7.3/10. Published 2025-02-14.

How severe is CVE-2024-8893?

High severity. CVSS v3 base score is 7.3 out of 10.

Vulnerability in Goodwe Technologies Co., Ltd. Gw1500‑xs

CVE-2024-8893

Use of Hard-coded Credentials vulnerability in GoodWe Technologies Co., Ltd. GW1500‑XS allows anyone in physical proximity to the device to fully access the web interface of the inverter via Wi‑Fi.This issue affects GW1500‑XS: 1.1.2.1.

EPSS: 0.003 (18.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L.

Affected products

Goodwe Technologies Co., Ltd. Gw1500‑xs — versions 1.1.2.1

Weakness classification (CWE)

CWE-798 — Use of Hard-coded Credentials

References

a6d3dc9e-0591-4a13-bce7-0f5b31ff6158

Frequently asked questions

What is CVE-2024-8893?: CVE-2024-8893 is a high-severity vulnerability in Goodwe Technologies Co., Ltd. Gw1500‑xs, classified under Use of Hard-coded Credentials. CVSS score: 7.3/10. Published 2025-02-14.
How severe is CVE-2024-8893?: High severity. CVSS v3 base score is 7.3 out of 10.