漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
漏洞
N/A
漏洞信息
An issue was discovered in SMA Solar Technology products. If a user simultaneously has Sunny Explorer running and visits a malicious host, cross-site request forgery can be used to change settings in the inverters (for example, issuing a POST request to change the user password). All Sunny Explorer settings available to the authenticated user are also available to the attacker. (In some cases, this also includes changing settings that the user has no access to.) This may result in complete compromise of the device. NOTE: the vendor reports that exploitation is unlikely because Sunny Explorer is used only rarely. Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected
漏洞信息
N/A
漏洞
N/A
漏洞
SMA Solar Technology Sunny Explorer和inverter 跨站请求伪造漏洞
漏洞信息
SMA Solar Technology Sunny Explorer是德国SMA公司的一款光伏设备管理软件。SMA Solar Technology inverter是德国SMA公司的一款光伏逆变器设备。 SMA Solar Technology Sunny Explorer及与Sunny Explorer有关联的inverter中存在跨站请求伪造漏洞。远程攻击者可利用该漏洞更改逆变器的设置。
漏洞信息
N/A
漏洞
N/A