Summary
Successful exploitation of this vulnerability could allow an attacker to generate a denial-of-service condition, modify passwords, enable services, achieve man-in-the-middle, and modify input parameters associated with devices such as sensors.
Vulnerabilities 1
-
High 8.8CVE-2019-13529 Public exploit
An attacker could send a malicious link to an authenticated operator, which may allow remote attackers to perform actio…
Revision history
-
#1
ICSA-19-281-01 SMA Solar Technology AG Sunny WebBox
References
-
ICS Advisory ICSA-19-281-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-19-281-01
-
Recommended Practices
https://www.us-cert.gov/ncas/tips/ST04-014
-
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B