Design/Logic Flaw

2024-02-2616:27:00

PRIOn knowledge base

www.prio-n.com

logic flaw

remote attack

clickjacking

authentication bypass

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

Vulnerability whereby an attacker could send a malicious link to an authenticated operator, which could allow remote attackers to perform a clickjacking attack on Sunny WebBox firmware version 1.6.1 and earlier.

References

www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-sma-products