PT-2025-20840 · Sma · Www.Sunnyportal.Com

Jannik Zimmer · Published 2025-05-13 · Updated 2025-05-18 · CVE-2025-41645

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined.

Description: An unauthenticated remote attacker could use a demo account of the portal to hijack devices that were created in that account by mistake.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-669

Related Identifiers

CVE-2025-41645

Affected Products

Www.Sunnyportal.Com

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-41645 · Security Note
• https://twitter.com/CveFindCom/status/1922215625859940534 · Twitter Post
• https://twitter.com/CVEnew/status/1922219516609597566 · Twitter Post
• https://twitter.com/cracbot/status/1924057484563812704 · Twitter Post
• https://cert.vde.com/en/advisories/VDE-2025-010 · Note
• https://twitter.com/Carlos_LopezMkt/status/1922217073050013726 · Twitter Post
• https://t.me/latest_high_impact_cve/2350 · Telegram Post