Description
Vulnerability whereby an attacker could send a malicious link to an authenticated operator, which could allow remote attackers to perform a clickjacking attack on Sunny WebBox firmware version 1.6.1 and earlier.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SMA | Sunny Webbox | ≤ 1.61 | — |
Advisories 1
- VDE-2024-075 SMA: Sunny Webbox clickjacking vulnerability CERT@VDE · Jun 17, 2025