← CVE Intelligence

CVE-2024-11025

SMA: SQL injection in Sunny Central UP PUBLISHED

Description (CNA)

An authenticated attacker with low privileges may use a SQL Injection vulnerability in the affected products administration panel to gain read and write access to a specific log file of the device.

Affected (CNA)

Vendor / productVersions
SMA / Sunny Central SC 1760-USaffected 0 before 10.01.18.R
SMA / Sunny Central SC 1850-USaffected 0 before 10.01.18.R
SMA / Sunny Central SC 2000 EV-USaffected 0 before 10.01.18.R
SMA / Sunny Central SC 2000-USaffected 0 before 10.01.18.R
SMA / Sunny Central SC-2200-10affected 0 before 10.01.18.R
SMA / Sunny Central SC 2200-USaffected 0 before 10.01.18.R
SMA / Sunny Central SC-2475-10affected 0 before 10.01.18.R
SMA / Sunny Central SC 2500 EV-USaffected 0 before 10.01.18.R
SMA / Sunny Central SC 2660 UPaffected 0 before 10.01.18.R
SMA / Sunny Central SC 2660 UP-USaffected 0 before 10.01.18.R
SMA / Sunny Central SC 2750 EV-USaffected 0 before 10.01.18.R
SMA / Sunny Central SC 2750 UP-USaffected 0 before 10.01.18.R
SMA / Sunny Central SC 2800 UPaffected 0 before 10.01.18.R
SMA / Sunny Central SC 2800 UP-USaffected 0 before 10.01.18.R
SMA / Sunny Central SC 2930 UPaffected 0 before 10.01.18.R
SMA / Sunny Central SC 2930 UP-USaffected 0 before 10.01.18.R
SMA / Sunny Central SC 3060 UPaffected 0 before 10.01.18.R
SMA / Sunny Central SC 3060 UP-USaffected 0 before 10.01.18.R
SMA / Sunny Central SC 4000 UPaffected 0 before 10.01.18.R
SMA / Sunny Central SC 4000 UP-USaffected 0 before 10.01.18.R
SMA / Sunny Central SC 4200 UPaffected 0 before 10.01.18.R
SMA / Sunny Central SC 4200 UP-USaffected 0 before 10.01.18.R
SMA / Sunny Central SC 4400 UPaffected 0 before 10.01.18.R
SMA / Sunny Central SC 4400 UP-JPaffected 0 before 10.01.18.R
SMA / Sunny Central SC 4400 UP-USaffected 0 before 10.01.18.R
SMA / Sunny Central SC 4600 UPaffected 0 before 10.01.18.R
SMA / Sunny Central SC 4600 UP-USaffected 0 before 10.01.18.R
SMA / Sunny Central Storage SCS-1900-10affected 0 before 10.01.18.R
SMA / Sunny Central Storage SCS-2200-10affected 0 before 10.01.18.R
SMA / Sunny Central Storage SCS 2300 UP-XTaffected 0 before 10.01.18.R
SMA / Sunny Central Storage SCS 2300 UP-XT-USaffected 0 before 10.01.18.R
SMA / Sunny Central Storage SCS 2400 UP-XTaffected 0 before 10.01.18.R
SMA / Sunny Central Storage SCS 2400 UP-XT-USaffected 0 before 10.01.18.R
SMA / Sunny Central Storage SCS-2475-10affected 0 before 10.01.18.R
SMA / Sunny Central Storage SCS 2530 UP-XTaffected 0 before 10.01.18.R
SMA / Sunny Central Storage SCS 2530 UP-XT-USaffected 0 before 10.01.18.R
SMA / Sunny Central Storage SCS 2630 UP-XTaffected 0 before 10.01.18.R
SMA / Sunny Central Storage SCS 2630 UP-XT-USaffected 0 before 10.01.18.R
SMA / Sunny Central Storage SCS-2900-10affected 0 before 10.01.18.R
SMA / Sunny Central Storage SCS 3450 UPaffected 0 before 10.01.18.R
SMA / Sunny Central Storage SCS 3450 UP-USaffected 0 before 10.01.18.R
SMA / Sunny Central Storage SCS 3450 UP-XTaffected 0 before 10.01.18.R
SMA / Sunny Central Storage SCS 3450 UP-XT-JPaffected 0 before 10.01.18.R
SMA / Sunny Central Storage SCS 3450 UP-XT-USaffected 0 before 10.01.18.R
SMA / Sunny Central Storage SCS 3600 UPaffected 0 before 10.01.18.R
SMA / Sunny Central Storage SCS 3600 UP-USaffected 0 before 10.01.18.R
SMA / Sunny Central Storage SCS 3600 UP-XTaffected 0 before 10.01.18.R
SMA / Sunny Central Storage SCS 3600 UP-XT-USaffected 0 before 10.01.18.R
SMA / Sunny Central Storage SCS 3800 UPaffected 0 before 10.01.18.R
SMA / Sunny Central Storage SCS 3800 UP-USaffected 0 before 10.01.18.R
SMA / Sunny Central Storage SCS 3800 UP-XTaffected 0 before 10.01.18.R
SMA / Sunny Central Storage SCS 3800 UP-XT-USaffected 0 before 10.01.18.R
SMA / Sunny Central Storage SCS 3950 UPaffected 0 before 10.01.18.R
SMA / Sunny Central Storage SCS 3950 UP-USaffected 0 before 10.01.18.R
SMA / Sunny Central Storage SCS 3950 UP-XTaffected 0 before 10.01.18.R
SMA / Sunny Central Storage SCS 3950 UP-XT-USaffected 0 before 10.01.18.R

CWE

CWE-89

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.