Summary
A security researcher discovered that in the affected products an authenticated (administration privileges) SQL injection has been found on the administration panel allowing access to a database. The database that can be accessed is a log database in which measurement data are stored for a graphical representation.
Details
Impact
An authenticated user can access (read/write) an internal SQL database with measurement data that are used only for a graphical representation in UI.
Mitigation
If you can not update your system to the latest version and you assume a manipulation of this database, you can download the raw data as a csv file.
Remediation
Update Firmware to at least version 10.01.18.R
Vulnerabilities 1
-
Medium 5.4
SMA: SQL injection in Sunny Central UP
An authenticated attacker with low privileges may use a SQL Injection vulnerability in the affected products administration panel to gain read and write access to a specific log file of the device.
Revision history
-
#3
Fix: version space
-
#2
fixed URL in CSAF reference, removed draft
-
#1
Initial revision.
References
-
SMA PSIRT
https://www.sma.de/cybersicherheit/produktsicherheit
-
CERT@VDE Security Advisories for SMA
https://certvde.com/en/advisories/vendor/sma/
-
VDE-2024-074: SMA: SQL injection in Sunny Central UP - HTML
https://certvde.com/en/advisories/VDE-2024-074