CVE-2024-11025

creationtimestamp| type| source ---|---|--- 2024-11-27 10:33:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113554465403282510...

CVE-2024-11025

CVE-2024-11025 corresponds to a SQL injection in the administration panel of SMA Solar Sunny Central devices (SC 1760-US, SC 1850-US, SC 2000 EV-US, and related models). The issue allows an authenticated attacker with low privileges to read and write to a device log file via the injection path. R...