2 lines
3.1 KiB
JSON
2 lines
3.1 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Sunny Webbox","vendor":"SMA","versions":[{"lessThanOrEqual":"1.61","status":"affected","version":"0","versionType":"custom"}]}],"source":"cve-coordination@incibe.es"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:sma:sunny_webbox_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"8AA41F6C-CC24-497B-99E5-F6F4205D0364","versionEndIncluding":"1.61","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:sma:sunny_webbox:*:*:*:*:*:*:*:*","matchCriteriaId":"0E1D0797-846A-436A-BBEA-EA222E826CBF","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[{"sourceIdentifier":"cve-coordination@incibe.es","tags":["unsupported-when-assigned"]}],"descriptions":[{"lang":"en","value":"Vulnerability whereby an attacker could send a malicious link to an authenticated operator, which could allow remote attackers to perform a clickjacking attack on Sunny WebBox firmware version 1.6.1 and earlier."},{"lang":"es","value":"Vulnerabilidad por la cual un atacante podría enviar un enlace malicioso a un operador autenticado, lo que podría permitir a atacantes remotos realizar un ataque de clickjacking en la versión de firmware 1.6.1 y anteriores de Sunny WebBox."}],"id":"CVE-2024-1890","lastModified":"2026-06-17T07:05:13.773","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":6.4,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:L","version":"3.1"},"exploitabilityScore":1.6,"impactScore":4.7,"source":"cve-coordination@incibe.es","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":2.5,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-1890","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-07-17T18:42:20.914349Z","version":"2.0.3"}}]},"published":"2024-02-26T16:27:55.340","references":[{"source":"cve-coordination@incibe.es","tags":["Third Party Advisory"],"url":"https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-sma-products"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-sma-products"}],"sourceIdentifier":"cve-coordination@incibe.es","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-1021"}],"source":"cve-coordination@incibe.es","type":"Secondary"}]}
|