CVE-2021-46416: SMA Sunny Tripower Firmware

High severity, CVSS 8.1. EPSS: 4.3% chance of exploitation in the next 30 days.

Insecure direct object reference in SUNNY TRIPOWER 5.0 Firmware version 3.10.16.R leads to unauthorized user groups accessing due to insecure cookie handling.

Affected products

• SMA Sunny Tripower Firmware: version 3.10.16.r only

Published 2022-04-07. Last modified 2026-07-13.