Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

SUNNET — Vulnerabilities & Security Advisories 22

Browse all 22 CVE security advisories affecting SUNNET. AI-powered Chinese analysis, POCs, and references for each vulnerability.

SUNNET primarily provides network management and monitoring solutions for enterprise infrastructure, enabling administrators to track device performance and connectivity. Security audits have identified twenty-two distinct Common Vulnerabilities and Exposures (CVEs) associated with its software suite, highlighting significant risks in production environments. Historically, these flaws predominantly involve remote code execution and cross-site scripting, allowing attackers to compromise system integrity or steal sensitive data. Additionally, several incidents demonstrate critical privilege escalation vulnerabilities, where unauthenticated users can gain administrative control over the network management interface. These security characteristics suggest a pattern of insufficient input validation and weak access controls within the application architecture. While specific major public breaches remain limited in scope, the cumulative impact of these vulnerabilities poses a substantial threat to organizational security postures, necessitating immediate patching and rigorous vulnerability management strategies to mitigate potential exploitation by malicious actors targeting network infrastructure.

Top products by SUNNET: eHRD CTMS eHRD WMPro CTMS
CVE ID Title CVSS Severity Published
CVE-2026-7490 Sunnet|CTMS and CPAS - Arbitrary File Upload — CTMS CWE-434 7.2 High 2026-05-02
CVE-2026-7489 Sunnet|CTMS - SQL Injection — CTMS CWE-89 8.8 High 2026-05-02
CVE-2025-15226 Sunnet|WMPro - Arbitrary File Upload — WMPro CWE-434 9.8 Critical 2025-12-29
CVE-2025-15225 Sunnet|WMPro - Arbitrary File Read — WMPro CWE-23 7.5 High 2025-12-29
CVE-2025-9570 Sunnet|eHRD CTMS - Arbitrary File Reading through Path Traversal — eHRD CTMS CWE-23 4.9 Medium 2025-09-01
CVE-2025-9569 Sunnet|eHRD CTMS - Reflected Cross-site Scripting — eHRD CTMS CWE-79 6.1 Medium 2025-09-01
CVE-2025-9568 Sunnet|eHRD CTMS - Reflected Cross-site Scripting — eHRD CTMS CWE-79 6.1 Medium 2025-09-01
CVE-2025-9567 Sunnet|eHRD CTMS - Reflected Cross-site Scripting — eHRD CTMS CWE-79 6.1 Medium 2025-09-01
CVE-2025-3707 Sunnet eHRD CTMS - SQL Injection — eHRD CTMS CWE-89 6.5 Medium 2025-05-02
CVE-2024-10440 Sunnet eHRD CTMS - SQL Injection — eHRD CTMS CWE-89 9.8 Critical 2024-10-28
CVE-2024-10439 Sunnet eHRD CTMS - Insecure Direct Object Reference — eHRD CTMS CWE-639 5.3 Medium 2024-10-28
CVE-2024-10438 Sunnet eHRD CTMS - Authentication Bypass — eHRD CTMS CWE-288 7.5 High 2024-10-28
CVE-2023-35851 SUNNET WMPro - SQL Injection — WMPro CWE-89 7.5 High 2023-09-18
CVE-2023-35850 SUNNET WMPro - Command Injection — WMPro CWE-78 7.2 High 2023-09-18
CVE-2023-24836 SUNNET CTMS - Path Traversal — CTMS CWE-22 8.8 High 2023-04-27
CVE-2021-43360 Sunnet eHRD - Insecure Deserialization — eHRD CWE-502 8.8 High 2021-12-01
CVE-2021-43359 Sunnet eHRD - Broken Access Control — eHRD CWE-732 8.8 High 2021-12-01
CVE-2021-43358 Sunnet eHRD - Path Traversal — eHRD CWE-22 7.5 High 2021-12-01
CVE-2020-10510 Sunnet eHRD - Broken Access Control — eHRD 8.1 High 2020-03-27
CVE-2020-10509 Sunnet eHRD - Cross-Site Scripting — eHRD CWE-79 6.1 Medium 2020-03-27
CVE-2020-10508 Sunnet eHRD - Sensitive Data Exposure — eHRD 7.5 High 2020-03-27
CVE-2019-11062 SUNNET WMPro v5.0 and v5.1 has OS Command Injection — WMPro CWE-78 9.8 - 2019-07-11

This page lists every published CVE security advisory associated with SUNNET. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.