CVE-2025-41645: SMA Www.sunnyportal.com

High severity, CVSS 8.6. EPSS: 0.4% chance of exploitation in the next 30 days.

An unauthenticated remote attacker could use a demo account of the portal to hijack devices that were created in that account by mistake.

Affected products

• SMA Www.sunnyportal.com: before 20.02.2025 (fixed in 20.02.2025)

Published 2025-05-13. Last modified 2026-06-17.