CVE-2025-41645

An unauthenticated remote attacker could use a demo account of the portal to hijack devices that were created in that account by mistake.

Score

CVSS 3.1 8.6 High

Status

Deferred - info@cert.vde.com

Published

2025-05-13

Last modified

2025-05-13

Weaknesses

CWE-669

Affected products

• Www.sunnyportal.com (Sma)

References

• https://cert.vde.com/en/advisories/VDE-2025-010