CVE-2025-0731

SMA: Sunny Portal Remote Code Execution PUBLISHED

Description (CNA)

An unauthenticated remote attacker can upload a .aspx file instead of a PV system picture through the demo account. The code can only be executed in the security context of the user.

Affected (CNA)

Vendor / product	Versions
SMA / www.sunnyportal.com	affected 0 before 19.02.2024

CWE

CWE-434

References

https://cert.vde.com/en/advisories/VDE-2025-012

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.