CVE-2019-13529 Vulnerability Details

  /     /     /  

CVE-2019-13529 Metadata Quick Info

CVE Published: 09/10/2019 | CVE Updated: 04/08/2024 | CVE Year: 2019
Source: icscert | Vendor: SMA Solar Technology AG | Product: Sunny WebBox
Status : PUBLISHED

---

CVE-2019-13529 Description

An attacker could send a malicious link to an authenticated operator, which may allow remote attackers to perform actions with the permissions of the user on the Sunny WebBox Firmware Version 1.6 and prior. This device uses IP addresses to maintain communication after a successful login, which would increase the ease of exploitation.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-352
CWE Name: CROSS-SITE REQUEST FORGERY (CSRF) CWE-352
Source: SMA Solar Technology AG

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).