CVE-2024-11025
SMA: SQL injection in Sunny Central UP
An authenticated attacker with low privileges may use a SQL Injection vulnerability in the affected products administration panel to gain read and write access to a specific log file of the device.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
SMA: SQL injection in Sunny Central UP
An authenticated attacker with low privileges may use a SQL Injection vulnerability in the affected products administration panel to gain read and write access to a specific log file of the device.
- Record
CVE-2024-11025- CVSS 3.1
- 5.4 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N - Weakness
- CWE-89
- Updated
- 2026-11-02
EUVDEUVD-2024-33982
An authenticated attacker with low privileges may use a SQL Injection vulnerability in the affected products administration panel to gain read and write access to a specific log file of the device.
- Record
EUVD-2024-33982- CVSS 3.1
- 5.4 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jh84-9442-8q99
An authenticated attacker with low privileges may use a SQL Injection vulnerability in the...
An authenticated attacker with low privileges may use a SQL Injection vulnerability in the affected products administration panel to gain read and write access to a specific log file of the device.
- Record
GHSA-jh84-9442-8q99- CVSS 3.1
- 5.4 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N - Weakness
- CWE-89
- Updated
- 2026-11-02
NVD
An authenticated attacker with low privileges may use a SQL Injection vulnerability in the affected products administration panel to gain read and write access to a specific log file of the device.
- Record
CVE-2024-11025- CVSS 3.1
- 5.4 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N - Weakness
- CWE-89
- Updated
- 2026-11-02
Affected products
- sma sunny central sc 1760-us
- sma sunny central sc 1850-us
- sma sunny central sc 2000 ev-us
- sma sunny central sc 2000-us
- sma sunny central sc 2200-us
- sma sunny central sc 2500 ev-us
- sma sunny central sc 2660 up
- sma sunny central sc 2660 up-us
- sma sunny central sc 2750 ev-us
- sma sunny central sc 2750 up-us
- sma sunny central sc 2800 up
- sma sunny central sc 2800 up-us
Show 44 moreShow less
- sma sunny central sc 2930 up
- sma sunny central sc 2930 up-us
- sma sunny central sc 3060 up
- sma sunny central sc 3060 up-us
- sma sunny central sc 4000 up
- sma sunny central sc 4000 up-us
- sma sunny central sc 4200 up
- sma sunny central sc 4200 up-us
- sma sunny central sc 4400 up
- sma sunny central sc 4400 up-jp
- sma sunny central sc 4400 up-us
- sma sunny central sc 4600 up
- sma sunny central sc 4600 up-us
- sma sunny central sc-2200-10
- sma sunny central sc-2475-10
- sma sunny central storage scs 2300 up-xt
- sma sunny central storage scs 2300 up-xt-us
- sma sunny central storage scs 2400 up-xt
- sma sunny central storage scs 2400 up-xt-us
- sma sunny central storage scs 2530 up-xt
- sma sunny central storage scs 2530 up-xt-us
- sma sunny central storage scs 2630 up-xt
- sma sunny central storage scs 2630 up-xt-us
- sma sunny central storage scs 3450 up
- sma sunny central storage scs 3450 up-us
- sma sunny central storage scs 3450 up-xt
- sma sunny central storage scs 3450 up-xt-jp
- sma sunny central storage scs 3450 up-xt-us
- sma sunny central storage scs 3600 up
- sma sunny central storage scs 3600 up-us
- sma sunny central storage scs 3600 up-xt
- sma sunny central storage scs 3600 up-xt-us
- sma sunny central storage scs 3800 up
- sma sunny central storage scs 3800 up-us
- sma sunny central storage scs 3800 up-xt
- sma sunny central storage scs 3800 up-xt-us
- sma sunny central storage scs 3950 up
- sma sunny central storage scs 3950 up-us
- sma sunny central storage scs 3950 up-xt
- sma sunny central storage scs 3950 up-xt-us
- sma sunny central storage scs-1900-10
- sma sunny central storage scs-2200-10
- sma sunny central storage scs-2475-10
- sma sunny central storage scs-2900-10
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-11025 is a medium vulnerability (CVSS 5.4) in Sma Sunny Central Sc 1760-us, published November 27, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 15th percentile. No source names a fixed version.