CVE-2024-11025 SMA: SQL injection in Sunny Central UP
An authenticated attacker with low privileges may use a SQL Injection vulnerability in the affected products administration panel to gain read and write access to a specific log file of the device.
Problem types: cwe_id: CWE-89
description: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: SMA
product: Sunny Central SC 1760-US
default_status: unaffected
vendor: SMA
product: Sunny Central SC 1850-US
default_status: unaffected
vendor: SMA
product: Sunny Central SC 2000 EV-US
default_status: unaffected
vendor: SMA
product: Sunny Central SC 2000-US
default_status: unaffected
vendor: SMA
product: Sunny Central SC-2200-10
default_status: unaffected
vendor: SMA
product: Sunny Central SC 2200-US
default_status: unaffected
vendor: SMA
product: Sunny Central SC-2475-10
default_status: unaffected
vendor: SMA
product: Sunny Central SC 2500 EV-US
default_status: unaffected
vendor: SMA
product: Sunny Central SC 2660 UP
default_status: unaffected
vendor: SMA
product: Sunny Central SC 2660 UP-US
default_status: unaffected
vendor: SMA
product: Sunny Central SC 2750 EV-US
default_status: unaffected
vendor: SMA
product: Sunny Central SC 2750 UP-US
default_status: unaffected
vendor: SMA
product: Sunny Central SC 2800 UP
default_status: unaffected
vendor: SMA
product: Sunny Central SC 2800 UP-US
default_status: unaffected
vendor: SMA
product: Sunny Central SC 2930 UP
default_status: unaffected
vendor: SMA
product: Sunny Central SC 2930 UP-US
default_status: unaffected
vendor: SMA
product: Sunny Central SC 3060 UP
default_status: unaffected
vendor: SMA
product: Sunny Central SC 3060 UP-US
default_status: unaffected
vendor: SMA
product: Sunny Central SC 4000 UP
default_status: unaffected
vendor: SMA
product: Sunny Central SC 4000 UP-US
default_status: unaffected
vendor: SMA
product: Sunny Central SC 4200 UP
default_status: unaffected
vendor: SMA
product: Sunny Central SC 4200 UP-US
default_status: unaffected
vendor: SMA
product: Sunny Central SC 4400 UP
default_status: unaffected
vendor: SMA
product: Sunny Central SC 4400 UP-JP
default_status: unaffected
vendor: SMA
product: Sunny Central SC 4400 UP-US
default_status: unaffected
vendor: SMA
product: Sunny Central SC 4600 UP
default_status: unaffected
vendor: SMA
product: Sunny Central SC 4600 UP-US
default_status: unaffected
vendor: SMA
product: Sunny Central Storage SCS-1900-10
default_status: unaffected
vendor: SMA
product: Sunny Central Storage SCS-2200-10
default_status: unaffected
vendor: SMA
product: Sunny Central Storage SCS 2300 UP-XT
default_status: unaffected
vendor: SMA
product: Sunny Central Storage SCS 2300 UP-XT-US
default_status: unaffected
vendor: SMA
product: Sunny Central Storage SCS 2400 UP-XT
default_status: unaffected
vendor: SMA
product: Sunny Central Storage SCS 2400 UP-XT-US
default_status: unaffected
vendor: SMA
product: Sunny Central Storage SCS-2475-10
default_status: unaffected
vendor: SMA
product: Sunny Central Storage SCS 2530 UP-XT
default_status: unaffected
vendor: SMA
product: Sunny Central Storage SCS 2530 UP-XT-US
default_status: unaffected
vendor: SMA
product: Sunny Central Storage SCS 2630 UP-XT
default_status: unaffected
vendor: SMA
product: Sunny Central Storage SCS 2630 UP-XT-US
default_status: unaffected
vendor: SMA
product: Sunny Central Storage SCS-2900-10
default_status: unaffected
vendor: SMA
product: Sunny Central Storage SCS 3450 UP
default_status: unaffected
vendor: SMA
product: Sunny Central Storage SCS 3450 UP-US
default_status: unaffected
vendor: SMA
product: Sunny Central Storage SCS 3450 UP-XT
default_status: unaffected
vendor: SMA
product: Sunny Central Storage SCS 3450 UP-XT-JP
default_status: unaffected
vendor: SMA
product: Sunny Central Storage SCS 3450 UP-XT-US
default_status: unaffected
vendor: SMA
product: Sunny Central Storage SCS 3600 UP
default_status: unaffected
vendor: SMA
product: Sunny Central Storage SCS 3600 UP-US
default_status: unaffected
vendor: SMA
product: Sunny Central Storage SCS 3600 UP-XT
default_status: unaffected
vendor: SMA
product: Sunny Central Storage SCS 3600 UP-XT-US
default_status: unaffected
vendor: SMA
product: Sunny Central Storage SCS 3800 UP
default_status: unaffected
vendor: SMA
product: Sunny Central Storage SCS 3800 UP-US
default_status: unaffected
vendor: SMA
product: Sunny Central Storage SCS 3800 UP-XT
default_status: unaffected
vendor: SMA
product: Sunny Central Storage SCS 3800 UP-XT-US
default_status: unaffected
vendor: SMA
product: Sunny Central Storage SCS 3950 UP
default_status: unaffected
vendor: SMA
product: Sunny Central Storage SCS 3950 UP-US
default_status: unaffected
vendor: SMA
product: Sunny Central Storage SCS 3950 UP-XT
default_status: unaffected
vendor: SMA
product: Sunny Central Storage SCS 3950 UP-XT-US
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.4
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
version: 3.1
Credits: lang: en
value: Pierre Martin from Synacktiv
Published: 2024-11-27T10:24:50.001Z