CVE-2024-11025: SMA Sunny Central Sc-2200-10

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

An authenticated attacker with low privileges may use a SQL Injection vulnerability in the affected products administration panel to gain read and write access to a specific log file of the device.

Affected products

  • SMA Sunny Central Sc-2200-10: before 10.01.18.R (fixed in 10.01.18.R)
  • SMA Sunny Central Sc-2475-10: before 10.01.18.R (fixed in 10.01.18.R)
  • SMA Sunny Central Sc 1760-Us: before 10.01.18.R (fixed in 10.01.18.R)
  • SMA Sunny Central Sc 1850-Us: before 10.01.18.R (fixed in 10.01.18.R)
  • SMA Sunny Central Sc 2000-Us: before 10.01.18.R (fixed in 10.01.18.R)
  • SMA Sunny Central Sc 2000 Ev-Us: before 10.01.18.R (fixed in 10.01.18.R)
  • SMA Sunny Central Sc 2200-Us: before 10.01.18.R (fixed in 10.01.18.R)
  • SMA Sunny Central Sc 2500 Ev-Us: before 10.01.18.R (fixed in 10.01.18.R)
  • SMA Sunny Central Sc 2660 Up: before 10.01.18.R (fixed in 10.01.18.R)
  • SMA Sunny Central Sc 2660 Up-Us: before 10.01.18.R (fixed in 10.01.18.R)
  • SMA Sunny Central Sc 2750 Ev-Us: before 10.01.18.R (fixed in 10.01.18.R)
  • SMA Sunny Central Sc 2750 Up-Us: before 10.01.18.R (fixed in 10.01.18.R)
  • SMA Sunny Central Sc 2800 Up: before 10.01.18.R (fixed in 10.01.18.R)
  • SMA Sunny Central Sc 2800 Up-Us: before 10.01.18.R (fixed in 10.01.18.R)
  • SMA Sunny Central Sc 2930 Up: before 10.01.18.R (fixed in 10.01.18.R)
  • SMA Sunny Central Sc 2930 Up-Us: before 10.01.18.R (fixed in 10.01.18.R)
  • SMA Sunny Central Sc 3060 Up: before 10.01.18.R (fixed in 10.01.18.R)
  • SMA Sunny Central Sc 3060 Up-Us: before 10.01.18.R (fixed in 10.01.18.R)
  • SMA Sunny Central Sc 4000 Up: before 10.01.18.R (fixed in 10.01.18.R)
  • SMA Sunny Central Sc 4000 Up-Us: before 10.01.18.R (fixed in 10.01.18.R)
  • SMA Sunny Central Sc 4200 Up: before 10.01.18.R (fixed in 10.01.18.R)
  • SMA Sunny Central Sc 4200 Up-Us: before 10.01.18.R (fixed in 10.01.18.R)
  • SMA Sunny Central Sc 4400 Up: before 10.01.18.R (fixed in 10.01.18.R)
  • SMA Sunny Central Sc 4400 Up-Jp: before 10.01.18.R (fixed in 10.01.18.R)
  • SMA Sunny Central Sc 4400 Up-Us: before 10.01.18.R (fixed in 10.01.18.R)
  • and 31 more

Published 2024-11-27. Last modified 2026-06-17.