« Volver al listado

CVE-2024-11025

Estado: AplazadaMedia (5.4)—

An authenticated attacker with low privileges may use a SQL Injection vulnerability in the affected products administration panel to gain read and write access to a specific log file of the device.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-11025",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-11025",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-11-27T11:56:18.041177Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "info@cert.vde.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.4,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.5,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "info@cert.vde.com",
      "affectedData": [
        {
          "vendor": "SMA",
          "product": "Sunny Central SC 1760-US",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central SC 1850-US",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central SC 2000 EV-US",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central SC 2000-US",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central SC-2200-10",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central SC 2200-US",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central SC-2475-10",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central SC 2500 EV-US",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central SC 2660 UP",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central SC 2660 UP-US",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central SC 2750 EV-US",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central SC 2750 UP-US",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central SC 2800 UP",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central SC 2800 UP-US",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central SC 2930 UP",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central SC 2930 UP-US",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central SC 3060 UP",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central SC 3060 UP-US",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central SC 4000 UP",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central SC 4000 UP-US",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central SC 4200 UP",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central SC 4200 UP-US",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central SC 4400 UP",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central SC 4400 UP-JP",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central SC 4400 UP-US",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central SC 4600 UP",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central SC 4600 UP-US",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central Storage SCS-1900-10",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central Storage SCS-2200-10",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central Storage SCS 2300 UP-XT",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central Storage SCS 2300 UP-XT-US",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central Storage SCS 2400 UP-XT",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central Storage SCS 2400 UP-XT-US",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central Storage SCS-2475-10",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central Storage SCS 2530 UP-XT",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central Storage SCS 2530 UP-XT-US",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central Storage SCS 2630 UP-XT",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central Storage SCS 2630 UP-XT-US",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central Storage SCS-2900-10",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central Storage SCS 3450 UP",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central Storage SCS 3450 UP-US",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central Storage SCS 3450 UP-XT",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central Storage SCS 3450 UP-XT-JP",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central Storage SCS 3450 UP-XT-US",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central Storage SCS 3600 UP",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central Storage SCS 3600 UP-US",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central Storage SCS 3600 UP-XT",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central Storage SCS 3600 UP-XT-US",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central Storage SCS 3800 UP",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central Storage SCS 3800 UP-US",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central Storage SCS 3800 UP-XT",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central Storage SCS 3800 UP-XT-US",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central Storage SCS 3950 UP",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central Storage SCS 3950 UP-US",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central Storage SCS 3950 UP-XT",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "SMA",
          "product": "Sunny Central Storage SCS 3950 UP-XT-US",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "10.01.18.R",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2024-11-27T11:17:41.740",
  "references": [
    {
      "url": "https://certvde.com/en/advisories/VDE-2024-074",
      "source": "info@cert.vde.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "info@cert.vde.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-89"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An authenticated attacker with low privileges may use a SQL Injection vulnerability in the affected products administration panel to gain read and write access to a specific log file of the device."
    },
    {
      "lang": "es",
      "value": "Un atacante autenticado con bajos privilegios puede utilizar una vulnerabilidad de inyección SQL en el panel de administración de los productos afectados para obtener acceso de lectura y escritura a un archivo de registro específico del dispositivo."
    }
  ],
  "lastModified": "2026-06-17T06:56:54.553",
  "sourceIdentifier": "info@cert.vde.com"
}