Description (CNA)
An authorized remote attacker can access files and directories outside the intended web root, potentially exposing sensitive system information of the affected Sunny Boy devices.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SMA / Boy 3.0 | affected 0.0.0 before 3.10.27.R |
| SMA / Boy 3.6 | affected 0.0.0 before 3.10.27.R |
| SMA / Boy 4.0 | affected 0.0.0 before 3.10.27.R |
| SMA / Boy 5.0 | affected 0.0.0 before 3.10.27.R |
| SMA / Boy 6.0 | affected 0.0.0 before 3.10.27.R |
CWE
CWE-23
References
ADP enrichment
No English description supplied.
No references supplied.