← volver
CVE-2019-13529

CVE-2019-13529

EPSS 2.2%CWE-352
An attacker could send a malicious link to an authenticated operator, which may allow remote attackers to perform actions with the permissions of the user on the Sunny WebBox Firmware Version 1.6 and prior. This device uses IP addresses to maintain communication after a successful login, which would increase the ease of exploitation.
Productos afectados
SMA Solar Technology AG · Sunny WebBox
PoCs públicas encontradas — 2
cve_referencepacketstormsecurity.com/files/154789/SMA-Solar-Technology-AG-Sunny-WebBox-1.6-Cross-Site-Request-Forgery.htmlno verificadoexploitdbwww.exploit-db.com/exploits/47480no verificado
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
http://packetstormsecurity.com/files/154789/SMA-Solar-Technology-AG-Sunny-WebBox-1.6-Cross-Site-Request-Forgery.htmlhttps://www.us-cert.gov/ics/advisories/icsa-19-281-01