See how sunny compares to other vendors in security performance
An unauthenticated remote attacker could use a demo account of the portal to hijack devices that were created in that account by mistake.
Vulnerability whereby an attacker could send a malicious link to an authenticated operator, which could allow remote attackers to perform a clickjacking attack on Sunny WebBox firmware version 1.6.1 and earlier.
An authenticated attacker with low privileges may use a SQL Injection vulnerability in the affected products administration panel to gain read and write access to a specific log file of the device.