CVE-2024-11025: SMA: SQL injection in Sunny Central UP
5.4
CVSS
Description
An authenticated attacker with low privileges may use a SQL Injection vulnerability in the affected products administration panel to gain read and write access to a specific log file of the device.
Classification
CVE ID: CVE-2024-11025
CVSS Base Severity: MEDIUM
CVSS Base Score: 5.4
Affected Products
Vendor: SMA
Product: Sunny Central SC 1760-US
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.05% (probability of being exploited)
EPSS Percentile: 16.18% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)