What the vulnerability does

01Description

A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. By using an encoded URL, a remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location.

Key dates

02Disclosure timeline

May 14, 2025 CVE published
May 14, 2025 Record updated