EUVD-2021-34684

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

A remote attacker can access files outside the web root on Sunny Boy devices, exposing data.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2021-4459	6 Feb 202503:13	–	circl
CNNVD	SMA Solar Technology AG Sunny Boy 安全漏洞	27 Aug 202500:00	–	cnnvd
CVE	CVE-2021-4459	27 Aug 202508:00	–	cve
Cvelist	CVE-2021-4459 SMA: Directory Traversal in Sunny Boy <3.10.27.R	27 Aug 202508:00	–	cvelist
NVD	CVE-2021-4459	27 Aug 202508:15	–	nvd
Positive Technologies	PT-2025-34841 · Sma Solar Technology · Sunny Boy	27 Aug 202500:00	–	ptsecurity
RedhatCVE	CVE-2021-4459	30 Aug 202518:20	–	redhatcve
Vulnrichment	CVE-2021-4459 SMA: Directory Traversal in Sunny Boy <3.10.27.R	27 Aug 202508:00	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "4841cc7e-70e3-3423-8c8c-8b406c958940",
        "vendor": {
          "name": "SMA"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "19490f57-b397-31f5-ad21-5b5cdb339204",
        "product": {
          "name": "Boy 4.0"
        },
        "product_version": "0.0.0 <3.10.27.R"
      },
      {
        "id": "70af6a46-4b91-3375-bd95-753b547cf105",
        "product": {
          "name": "Boy 6.0"
        },
        "product_version": "0.0.0 <3.10.27.R"
      },
      {
        "id": "7d03ccef-1b26-31b1-bf45-42aed6919f3f",
        "product": {
          "name": "Boy 5.0"
        },
        "product_version": "0.0.0 <3.10.27.R"
      },
      {
        "id": "a8b2f661-0db7-311c-bc41-39ad34663508",
        "product": {
          "name": "Boy 3.0"
        },
        "product_version": "0.0.0 <3.10.27.R"
      },
      {
        "id": "fab321eb-2819-3bec-b1ea-3ce2b6fe416b",
        "product": {
          "name": "Boy 3.6"
        },
        "product_version": "0.0.0 <3.10.27.R"
      }
    ]
  }
]

Source	Link
certvde	www.certvde.com/en/advisories/VDE-2025-066

03 Oct 2025 20:07Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.16.5

EPSS0.00094

SSVC