Cross-Site Request Forgery vulnerability in SMA Cluster Controller, affecting version 01.05.01.R. This vulnerability could allow an attacker to send a malicious link to an authenticated user to perform actions with these user permissions on the affected device.
References
| Link | Resource |
|---|---|
| https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-sma-products | Third Party Advisory |
| https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-sma-products | Third Party Advisory |
Configurations
History
11 Mar 2025, 14:51
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:h:sma:sunny_webbox:*:*:*:*:*:*:*:* cpe:2.3:o:sma:sunny_webbox_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:sma:cluster_controller:*:*:*:*:*:*:*:* |
cpe:2.3:o:sma:clcon-10_firmware:01.05.01.r:*:*:*:*:*:*:* cpe:2.3:o:sma:clcon-s-10_firmware:01.05.01.r:*:*:*:*:*:*:* cpe:2.3:h:sma:clcon-10:-:*:*:*:*:*:*:* cpe:2.3:h:sma:clcon-s-10:-:*:*:*:*:*:*:* |
| First Time |
Sma clcon-10 Firmware
Sma clcon-s-10 Sma clcon-s-10 Firmware Sma clcon-10 |
27 Feb 2025, 22:03
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:sma:sunny_webbox_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:sma:sunny_webbox:*:*:*:*:*:*:*:* cpe:2.3:o:sma:cluster_controller_firmware:01.05.01.r:*:*:*:*:*:*:* cpe:2.3:h:sma:cluster_controller:*:*:*:*:*:*:*:* |
|
| References | () https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-sma-products - Third Party Advisory | |
| First Time |
Sma cluster Controller
Sma sunny Webbox Sma Sma cluster Controller Firmware Sma sunny Webbox Firmware |
Information
Published : 2024-02-26 16:27
Updated : 2025-03-11 14:51
NVD link : CVE-2024-1889
Mitre link : CVE-2024-1889
CVE.ORG link : CVE-2024-1889
JSON object : View
Products Affected
sma
- clcon-s-10
- clcon-s-10_firmware
- clcon-10
- clcon-10_firmware
CWE
CWE-352
Cross-Site Request Forgery (CSRF)