CVE-2021-4459CWE-23
SMA: Directory Traversal in Sunny Boy <3.10.27.R
Medium · published August 27, 2025
What it is
An authorized remote attacker can access files and directories outside the intended web root, potentially exposing sensitive system information of the affected Sunny Boy devices.
The record
Technical detail
- CVSS v3.1
- 6.5 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00671 · 51.4th percentile
- Weakness
- CWE-23 · Relative Path Traversal
- Published
- 2025-08-27T08:00Z
EPSS history
Timeline