# Exploit Title: SMA Solar Technology AG Sunny WebBox device - 1.6 - Cross-Site Request Forgery # Date: 2019-10-08 # Exploit Author: Borja Merino and Eduardo Villaverde # Vendor Homepage: https://www.sma.de # Version: Firmware Version 1.6 and prior # Tested on: Sunny WebBox SMA Solar Device (Firmware Version 1.6) # CVE : CVE-2019-13529 # ICS-Cert Advisory: https://www.us-cert.gov/ics/advisories/icsa-19-281-01