CVE-2019-13529

CVE-2019-13529

Vendor Sma Solar Technology Ag
Product Sunny WebBox
Weakness CWE-352 · CSRF
Published October 9, 2019
Last update August 4, 2024

CVSS base score

What the vulnerability does

01Description

An attacker could send a malicious link to an authenticated operator, which may allow remote attackers to perform actions with the permissions of the user on the Sunny WebBox Firmware Version 1.6 and prior. This device uses IP addresses to maintain communication after a successful login, which would increase the ease of exploitation.

Key dates

02Disclosure timeline

October 9, 2019 CVE published
August 4, 2024 Record updated

Related vulnerabilities

04Related CVE