CVE-2021-4459

An authorized remote attacker can access files and directories outside the intended web root, potentially exposing sensitive system information of the affected Sunny Boy devices.

Score

CVSS 3.1 6.5 Medium

Status

Deferred - info@cert.vde.com

Published

2025-08-27

Last modified

2025-08-27

Weaknesses

CWE-23

Affected products

• Boy 3.0 (Sma)
• Boy 3.6 (Sma)
• Boy 4.0 (Sma)
• Boy 5.0 (Sma)
• Boy 6.0 (Sma)

References

• https://certvde.com/en/advisories/VDE-2025-066