cve.bz

CVE-2021-46416

8.1 highEPSS 4.3%

High (8.1) in sma sunny tripower firmware. EPSS 4.3% chance of exploitation in the next 30 days.

Insecure direct object reference in SUNNY TRIPOWER 5.0 Firmware version 3.10.16.R leads to unauthorized user groups accessing due to insecure cookie handling.

Severity

CVSS 3.1

8.1 high
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
EPSS
4.3% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
CWE
CWE-639
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON