SMA Solar Sunny Central Series Vulnerability Advisory (VDE-2024-074)

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability ID: VDE-2024-074 2. Release Date: November 27, 2024, 10:00 (CET) 3. Update Date: November 25, 2024, 14:40 (CET) 4. Vendor: SMA Solar Technology AG 5. Affected Products: A list of SMA Solar Technology AG products is provided, including Sunny Central SC series, Sunny Central Storage series, etc., with specific models and versions as follows: - Sunny Central SC 1760-US - Sunny Central SC 1850-US - Sunny Central SC 2000 EV-US - Sunny Central SC 2000-US - Sunny Central SC-2200-10 - Sunny Central SC 2200-US - Sunny Central SC-2475-10 - Sunny Central SC 2500 EV-US - Sunny Central SC 2660 UP - Sunny Central SC 2660 UP-US - Sunny Central SC 2750 EV-US - Sunny Central SC 2750 UP-US - Sunny Central SC 2800 UP - Sunny Central SC 2800 UP-US - Sunny Central SC 2930 UP - Sunny Central SC 2930 UP-US - Sunny Central SC 3060 UP - Sunny Central SC 3060 UP-US - Sunny Central SC 4000 UP - Sunny Central SC 4000 UP-US - Sunny Central SC 4200 UP - Sunny Central SC 4200 UP-US - Sunny Central SC 4400 UP - Sunny Central SC 4400 UP-JP - Sunny Central SC 4400 UP-US - Sunny Central SC 4600 UP - Sunny Central SC 4600 UP-US - Sunny Central Storage SCS-1900-10 - Sunny Central Storage SCS-2200-10 - Sunny Central Storage SCS 2300 UP-XT - Sunny Central Storage SCS 2300 UP-XT-US - Sunny Central Storage SCS 2400 UP-XT - Sunny Central Storage SCS 2475-10 - Sunny Central Storage SCS 2530 UP-XT - Sunny Central Storage SCS 2530 UP-XT-US - Sunny Central Storage SCS 2630 UP-XT - Sunny Central Storage SCS 2630 UP-XT-US - Sunny Central Storage SCS-2900-10 - Sunny Central Storage SCS 3450 UP - Sunny Central Storage SCS 3450 UP-US - Sunny Central Storage SCS 3450 UP-XT - Sunny Central Storage SCS 3450 UP-XT-JP - Sunny Central Storage SCS 3450 UP-XT-US - Sunny Central Storage SCS 3600 UP - Sunny Central Storage SCS 3600 UP-US - Sunny Central Storage SCS 3600 UP-XT - Sunny Central Storage SCS 3600 UP-XT-US - Sunny Central Storage SCS 3800 UP - Sunny Central Storage SCS 3800 UP-US - Sunny Central Storage SCS 3800 UP-XT - Sunny Central Storage SCS 3800 UP-XT-US - Sunny Central Storage SCS 3950 UP - Sunny Central Storage SCS 3950 UP-US - Sunny Central Storage SCS 3950 UP-XT - Sunny Central Storage SCS 3950 UP-XT-US 6. Vulnerability Description: An SQL injection vulnerability was discovered in the management panel of the affected products, allowing access to the database. This database stores measurement data used for graphical representation in the UI. 7. CVE ID: CVE-2024-11025 8. Severity: 5.4 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) 9. Weakness: Improper neutralization of special elements in SQL commands (SQL Injection) (CWE-89) 10. Impact: Unauthorized users can access (read/write) an internal SQL database used exclusively for graphical representation in the UI. 11. Solution: - Mitigation: If updating the system to the latest version is not possible and database tampering is suspected, original data can be downloaded as a CSV file. - Fix: Update firmware to at least version 10.01.18.R. 12. Reporter: Pierre Martin from Synacktiv 13. Coordination: CERT@VDE coordinated with SMA This information provides a detailed description of the vulnerability, including affected products, severity, impact scope, and remediation steps.

Goal Reached Thanks to every supporter — we hit 100%!

SMA Solar Sunny Central Series Vulnerability Advisory (VDE-2024-074)