CVE-2018-19023: Hetronic Bms-Hl Firmware

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Hetronic Nova-M prior to verson r161 uses fixed codes that are reproducible by sniffing and re-transmission. This can lead to unauthorized replay of a command, spoofing of an arbitrary message, or keeping the controlled load in a permanent "stop" state.

Affected products

• Hetronic Bms-Hl Firmware: before main_r1175 (fixed in main_r1175)
• Hetronic DC Mobile Firmware: before main_r515 (fixed in main_r515)
• Hetronic Es-Can-Hl Firmware: before main_r1864 (fixed in main_r1864)
• Hetronic Mlc Firmware: before main_r1600 (fixed in main_r1600)
• Hetronic Nova-M Firmware: before r161 (fixed in r161)

Published 2019-01-25. Last modified 2026-06-17.