CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-9852

An Incorrect Password Management issue was discovered in SMA Solar Technology products. Default passwords exist that are rarely changed. User passwords will almost always be default. Installer passwords are expected to be default or similar across installations installed by the same company (but are sometimes changed). Hidden user accounts have (at least in some cases, though more research is required to test this for all hidden user accounts) a fixed password for all devices; it can never be changed by a user. Other vulnerabilities exist that allow an attacker to get the passwords of these hidden user accounts. NOTE: the vendor reports that it has no influence on the allocation of passwords, and that global hardcoded master passwords do not exist. Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 54.9%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 5.0

References

Products affected by CVE-2017-9852

Sma » Sunny Boy 1.5 » Version: N/A

cpe:2.3:h:sma:sunny_boy_1.5:-
Sma » Sunny Boy 2.5 » Version: N/A

cpe:2.3:h:sma:sunny_boy_2.5:-
Sma » Sunny Boy 3.0 » Version: N/A

cpe:2.3:h:sma:sunny_boy_3.0:-
Sma » Sunny Boy 3.6 » Version: N/A

cpe:2.3:h:sma:sunny_boy_3.6:-
Sma » Sunny Boy 3000tl » Version: N/A

cpe:2.3:h:sma:sunny_boy_3000tl:-
Sma » Sunny Boy 3600 » Version: N/A

cpe:2.3:h:sma:sunny_boy_3600:-
Sma » Sunny Boy 3600tl » Version: N/A

cpe:2.3:h:sma:sunny_boy_3600tl:-
Sma » Sunny Boy 4.0 » Version: N/A

cpe:2.3:h:sma:sunny_boy_4.0:-
Sma » Sunny Boy 4000tl » Version: N/A

cpe:2.3:h:sma:sunny_boy_4000tl:-
Sma » Sunny Boy 5.0 » Version: N/A

cpe:2.3:h:sma:sunny_boy_5.0:-
Sma » Sunny Boy 5000 » Version: N/A

cpe:2.3:h:sma:sunny_boy_5000:-
Sma » Sunny Boy 5000tl » Version: N/A

cpe:2.3:h:sma:sunny_boy_5000tl:-
Sma » Sunny Boy Storage 2.5 » Version: N/A

cpe:2.3:h:sma:sunny_boy_storage_2.5:-
Sma » Sunny Central 1000cp Xt » Version: N/A

cpe:2.3:h:sma:sunny_central_1000cp_xt:-
Sma » Sunny Central 2200 » Version: N/A

cpe:2.3:h:sma:sunny_central_2200:-
Sma » Sunny Central 500cp Xt » Version: N/A

cpe:2.3:h:sma:sunny_central_500cp_xt:-
Sma » Sunny Central 630cp Xt » Version: N/A

cpe:2.3:h:sma:sunny_central_630cp_xt:-
Sma » Sunny Central 720cp Xt » Version: N/A

cpe:2.3:h:sma:sunny_central_720cp_xt:-
Sma » Sunny Central 760cp Xt » Version: N/A

cpe:2.3:h:sma:sunny_central_760cp_xt:-
Sma » Sunny Central 800cp Xt » Version: N/A

cpe:2.3:h:sma:sunny_central_800cp_xt:-
Sma » Sunny Central 850cp Xt » Version: N/A

cpe:2.3:h:sma:sunny_central_850cp_xt:-
Sma » Sunny Central 900cp Xt » Version: N/A

cpe:2.3:h:sma:sunny_central_900cp_xt:-
Sma » Sunny Central Storage 1000 » Version: N/A

cpe:2.3:h:sma:sunny_central_storage_1000:-
Sma » Sunny Central Storage 2200 » Version: N/A

cpe:2.3:h:sma:sunny_central_storage_2200:-
Sma » Sunny Central Storage 2500-Ev » Version: N/A

cpe:2.3:h:sma:sunny_central_storage_2500-ev:-
Sma » Sunny Central Storage 500 » Version: N/A

cpe:2.3:h:sma:sunny_central_storage_500:-
Sma » Sunny Central Storage 630 » Version: N/A

cpe:2.3:h:sma:sunny_central_storage_630:-
Sma » Sunny Central Storage 720 » Version: N/A

cpe:2.3:h:sma:sunny_central_storage_720:-
Sma » Sunny Central Storage 760 » Version: N/A

cpe:2.3:h:sma:sunny_central_storage_760:-
Sma » Sunny Central Storage 800 » Version: N/A

cpe:2.3:h:sma:sunny_central_storage_800:-
Sma » Sunny Central Storage 850 » Version: N/A

cpe:2.3:h:sma:sunny_central_storage_850:-
Sma » Sunny Central Storage 900 » Version: N/A

cpe:2.3:h:sma:sunny_central_storage_900:-
Sma » Sunny Tripower 12000tl » Version: N/A

cpe:2.3:h:sma:sunny_tripower_12000tl:-
Sma » Sunny Tripower 15000tl » Version: N/A

cpe:2.3:h:sma:sunny_tripower_15000tl:-
Sma » Sunny Tripower 20000tl » Version: N/A

cpe:2.3:h:sma:sunny_tripower_20000tl:-
Sma » Sunny Tripower 25000tl » Version: N/A

cpe:2.3:h:sma:sunny_tripower_25000tl:-
Sma » Sunny Tripower 5000tl » Version: N/A

cpe:2.3:h:sma:sunny_tripower_5000tl:-
Sma » Sunny Tripower 60 » Version: N/A

cpe:2.3:h:sma:sunny_tripower_60:-
Sma » Sunny Tripower Core1 » Version: N/A

cpe:2.3:h:sma:sunny_tripower_core1:-
Sma » Sunny Boy 1.5 Firmware » Version: N/A

cpe:2.3:o:sma:sunny_boy_1.5_firmware:-
Sma » Sunny Boy 2.5 Firmware » Version: N/A

cpe:2.3:o:sma:sunny_boy_2.5_firmware:-
Sma » Sunny Boy 3.0 Firmware » Version: N/A

cpe:2.3:o:sma:sunny_boy_3.0_firmware:-
Sma » Sunny Boy 3.6 Firmware » Version: N/A

cpe:2.3:o:sma:sunny_boy_3.6_firmware:-
Sma » Sunny Boy 3000tl Firmware » Version: N/A

cpe:2.3:o:sma:sunny_boy_3000tl_firmware:-
Sma » Sunny Boy 3600 Firmware » Version: N/A

cpe:2.3:o:sma:sunny_boy_3600_firmware:-
Sma » Sunny Boy 3600tl Firmware » Version: N/A

cpe:2.3:o:sma:sunny_boy_3600tl_firmware:-
Sma » Sunny Boy 4.0 Firmware » Version: N/A

cpe:2.3:o:sma:sunny_boy_4.0_firmware:-
Sma » Sunny Boy 4000tl Firmware » Version: N/A

cpe:2.3:o:sma:sunny_boy_4000tl_firmware:-
Sma » Sunny Boy 5.0 Firmware » Version: N/A

cpe:2.3:o:sma:sunny_boy_5.0_firmware:-
Sma » Sunny Boy 5000 Firmware » Version: N/A

cpe:2.3:o:sma:sunny_boy_5000_firmware:-
Sma » Sunny Boy 5000tl Firmware » Version: N/A

cpe:2.3:o:sma:sunny_boy_5000tl_firmware:-
Sma » Sunny Boy Storage 2.5 Firmware » Version: N/A

cpe:2.3:o:sma:sunny_boy_storage_2.5_firmware:-
Sma » Sunny Central 1000cp Xt Firmware » Version: N/A

cpe:2.3:o:sma:sunny_central_1000cp_xt_firmware:-
Sma » Sunny Central 2200 Firmware » Version: N/A

cpe:2.3:o:sma:sunny_central_2200_firmware:-
Sma » Sunny Central 500cp Xt Firmware » Version: N/A

cpe:2.3:o:sma:sunny_central_500cp_xt_firmware:-
Sma » Sunny Central 630cp Xt Firmware » Version: N/A

cpe:2.3:o:sma:sunny_central_630cp_xt_firmware:-
Sma » Sunny Central 720cp Xt Firmware » Version: N/A

cpe:2.3:o:sma:sunny_central_720cp_xt_firmware:-
Sma » Sunny Central 760cp Xt Firmware » Version: N/A

cpe:2.3:o:sma:sunny_central_760cp_xt_firmware:-
Sma » Sunny Central 800cp Xt Firmware » Version: N/A

cpe:2.3:o:sma:sunny_central_800cp_xt_firmware:-
Sma » Sunny Central 850cp Xt Firmware » Version: N/A

cpe:2.3:o:sma:sunny_central_850cp_xt_firmware:-
Sma » Sunny Central 900cp Xt Firmware » Version: N/A

cpe:2.3:o:sma:sunny_central_900cp_xt_firmware:-
Sma » Sunny Central Storage 1000 Firmware » Version: N/A

cpe:2.3:o:sma:sunny_central_storage_1000_firmware:-
Sma » Sunny Central Storage 2200 Firmware » Version: N/A

cpe:2.3:o:sma:sunny_central_storage_2200_firmware:-
Sma » Sunny Central Storage 2500-Ev Firmware » Version: N/A

cpe:2.3:o:sma:sunny_central_storage_2500-ev_firmware:-
Sma » Sunny Central Storage 500 Firmware » Version: N/A

cpe:2.3:o:sma:sunny_central_storage_500_firmware:-
Sma » Sunny Central Storage 630 Firmware » Version: N/A

cpe:2.3:o:sma:sunny_central_storage_630_firmware:-
Sma » Sunny Central Storage 720 Firmware » Version: N/A

cpe:2.3:o:sma:sunny_central_storage_720_firmware:-
Sma » Sunny Central Storage 760 Firmware » Version: N/A

cpe:2.3:o:sma:sunny_central_storage_760_firmware:-
Sma » Sunny Central Storage 800 Firmware » Version: N/A

cpe:2.3:o:sma:sunny_central_storage_800_firmware:-
Sma » Sunny Central Storage 850 Firmware » Version: N/A

cpe:2.3:o:sma:sunny_central_storage_850_firmware:-
Sma » Sunny Central Storage 900 Firmware » Version: N/A

cpe:2.3:o:sma:sunny_central_storage_900_firmware:-
Sma » Sunny Tripower 12000tl Firmware » Version: N/A

cpe:2.3:o:sma:sunny_tripower_12000tl_firmware:-
Sma » Sunny Tripower 15000tl Firmware » Version: N/A

cpe:2.3:o:sma:sunny_tripower_15000tl_firmware:-
Sma » Sunny Tripower 20000tl Firmware » Version: N/A

cpe:2.3:o:sma:sunny_tripower_20000tl_firmware:-
Sma » Sunny Tripower 25000tl Firmware » Version: N/A

cpe:2.3:o:sma:sunny_tripower_25000tl_firmware:-
Sma » Sunny Tripower 5000tl Firmware » Version: N/A

cpe:2.3:o:sma:sunny_tripower_5000tl_firmware:-
Sma » Sunny Tripower 60 Firmware » Version: N/A

cpe:2.3:o:sma:sunny_tripower_60_firmware:-
Sma » Sunny Tripower Core1 Firmware » Version: N/A

cpe:2.3:o:sma:sunny_tripower_core1_firmware:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-9852

Products

Pricing

Contact Us