CVE-2025-0731

An unauthenticated remote attacker can upload a .aspx file instead of a PV system picture through the demo account. The code can only be executed in the security context of the user...

CVE-2025-0731

creationtimestamp| type| source ---|---|--- 2025-02-26 10:24:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5481 2025-03-20 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-079-04 2025-03-28 11:20:12+00:00| seen|...

CVE-2025-0731

CVE-2025-0731: SMA Solar Sunny Portal is vulnerable to an unauthenticated remote attack where an attacker can upload a .aspx file via the demo account. The uploaded code can execute only in the security context of the user. Documented impact is remote code execution (RCE) with the attacker able t...