SMA: Sunny Portal Remote Code Execution
Priority LOW 36CWE-434Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- None · Low · Low
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-434.
Summary
An unauthenticated remote attacker can upload a .aspx file instead of a PV system picture through the demo account. The code can only be executed in the security context of the user.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00725 54th percentileScored 2026-11-07
Fix Fixed www.sunnyportal.com (SMA): 19.02.2024
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
Remediation
- Fix · CNA www.sunnyportal.com (SMA) Fixed in 19.02.2024
Timeline
- 2026-10-02 Threatist record created from CVE-2025-0731
References
More SMA vulnerabilities
- TI-2019-10161 Cross-site request forgery in SMA Solar Technology AG Sunny WebBox CVSS 3.1HIGH 8.8
- TI-2021-21218 Insecure direct object reference in SUNNY TRIPOWER 5.0 Firmware version 3.10.16.R leads… CVSS 3.1HIGH 8.1
- TI-2017-07230 An issue was discovered in SMA Solar Technology products. CVSS 3.0CRITICAL 9.8
- TI-2017-07225 An issue was discovered in SMA Solar Technology products. CVSS 3.1CRITICAL 9.8
- TI-2017-07231 An issue was discovered in SMA Solar Technology products. CVSS 3.0CRITICAL 9.8
- TI-2017-07223 An issue was discovered in SMA Solar Technology products. CVSS 3.0CRITICAL 9.8
Sources
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences