An unauthenticated remote attacker could use a demo account of the portal to hijack devices that were created in that account by mistake.

An unauthenticated remote attacker could use a demo account of the portal to hijack devices that were created in that account by mistake.

A security researcher discovered a privilege escalation vulnerability in the demo system area of the SMA Classic Portal, www.sunnyportal.com. Only systems of other users have been affected who unintendedly and illicitly had added their non-demo systems to the demo system area.