SMA Sunny Boy Directory Traversal Vulnerability Allowing Unauthorized File Access

A directory traversal vulnerability has been identified in SMA Sunny Boy inverter models 3.0, 3.6, 4.0, 5.0, and 6.0, all versions prior to 3.10.27.R. This vulnerability allows authorized remote attackers to access files and directories outside the intended web root, potentially exposing sensitive system information from the affected devices.

Impact

Exploitation of this vulnerability allows authenticated users to access restricted files and directories, potentially leading to the disclosure of sensitive system information.

Remediation

Users are advised to update the firmware to version 3.10.27.R or later.