CWE
521
Advisory Published
Updated

CVE-2017-9853

First published: Sat Aug 05 2017(Updated: )

** DISPUTED ** An issue was discovered in SMA Solar Technology products. All inverters have a very weak password policy for the user and installer password. No complexity requirements or length requirements are set. Also, strong passwords are impossible due to a maximum of 12 characters and a limited set of characters. NOTE: the vendor reports that the 12-character limit provides "a very high security standard." Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected.

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
SMA Sunny Boy 3600 Firmware
Sma Sunny Boy 3600tl Firmware
SMA Sunny Boy 5000 Firmware
SMA Sunny Boy 5000TL
SMA Sunny Tripower Core1 Firmware
SMA Sunny Tripower Core1
SMA Sunny Tripower 15000TL Firmware
SMA Sunny Tripower 15000TL Firmware
SMA Sunny Tripower 20000TL Firmware
SMA Sunny Tripower 20000TL
SMA Sunny Tripower 25000TL Firmware
SMA Sunny Tripower 25000TL
SMA Sunny Tripower 5000TL
SMA Sunny Tripower 5000TL
SMA Sunny Tripower 12000TL Firmware
SMA Sunny Tripower 12000TL Firmware
SMA Sunny Tripower 60
SMA Sunny Tripower 60
SMA Sunny Boy 3000TL
SMA Sunny Boy 3000TL
Sma Sunny Boy 3600tl Firmware
Sma Sunny Boy 3600tl Firmware
SMA Sunny Boy 4000TL Firmware
SMA Sunny Boy 4000TL Firmware
SMA Sunny Boy 5000TL Firmware
SMA Sunny Boy 5000TL
SMA Sunny Boy 1.5 Firmware
SMA Sunny Boy 1.5 Firmware
SMA Sunny Boy Storage 2.5 Firmware
SMA Sunny Boy Storage 2.5 Firmware
SMA Sunny Boy 3.0 Firmware
SMA Sunny Boy 3.0 Firmware
SMA Sunny Boy 3.6
Sma Sunny Boy 3.6 Firmware
SMA Sunny Boy 4.0 Firmware
SMA Sunny Boy 4.0 Firmware
Sma Sunny Boy 5.0
SMA Sunny Boy 5000TL
SMA Sunny Central 2200 Firmware
SMA Sunny Central 2200 Firmware
SMA Sunny Central 1000CP XT Firmware
SMA Sunny Central 1000CP XT Firmware
SMA Sunny Central 800CP XT Firmware
SMA Sunny Central 800CP XT Firmware
SMA Sunny Central 850CP XT Firmware
SMA Sunny Central 850CP XT Firmware
Sma Sunny Central 900cp Xt Firmware
Sma Sunny Central 900cp Xt Firmware
SMA Sunny Central 500CP XT Firmware
SMA Sunny Central 500cp Xt
Sma Sunny Central 630cp Xt Firmware
Sma Sunny Central 630cp Xt Firmware
SMA Sunny Central 720CP Xt
SMA Sunny Central 720CP Xt
SMA Sunny Central 760CP XT Firmware
SMA Sunny Central 760CP XT Firmware
Sma Sunny Central Storage 500 Firmware
Sma Sunny Central Storage 500 Firmware
Sma Sunny Central Storage 630 Firmware
Sma Sunny Central Storage 630 Firmware
SMA Sunny Central Storage 720
SMA Sunny Central Storage 720
SMA Sunny Central Storage 760 Firmware
SMA Sunny Central Storage 760 Firmware
SMA Sunny Central Storage 800 Firmware
SMA Sunny Central Storage 800 Firmware
SMA Sunny Central Storage 850 Firmware
SMA Sunny Central Storage 850 Firmware
SMA Sunny Central Storage 900
Sma Sunny Central Storage 900 Firmware
Sma Sunny Central Storage 1000 Firmware
SMA Sunny Central Storage 1000
Sma Sunny Central Storage 2200 Firmware
SMA Sunny Central Storage 2200
SMA Sunny Central Storage 2500-EV Firmware
SMA Sunny Central Storage 2500-eV
SMA Sunny Boy Storage 2.5 Firmware
SMA Sunny Boy Storage 2.5
All of
SMA Sunny Boy 3600 Firmware
Sma Sunny Boy 3600tl Firmware
All of
SMA Sunny Boy 5000 Firmware
SMA Sunny Boy 5000TL
All of
SMA Sunny Tripower Core1 Firmware
SMA Sunny Tripower Core1
All of
SMA Sunny Tripower 15000TL Firmware
SMA Sunny Tripower 15000TL Firmware
All of
SMA Sunny Tripower 20000TL Firmware
SMA Sunny Tripower 20000TL
All of
SMA Sunny Tripower 25000TL Firmware
SMA Sunny Tripower 25000TL
All of
SMA Sunny Tripower 5000TL
SMA Sunny Tripower 5000TL
All of
SMA Sunny Tripower 12000TL Firmware
SMA Sunny Tripower 12000TL Firmware
All of
SMA Sunny Tripower 60
SMA Sunny Tripower 60
All of
SMA Sunny Boy 3000TL
SMA Sunny Boy 3000TL
All of
Sma Sunny Boy 3600tl Firmware
Sma Sunny Boy 3600tl Firmware
All of
SMA Sunny Boy 4000TL Firmware
SMA Sunny Boy 4000TL Firmware
All of
SMA Sunny Boy 5000TL Firmware
SMA Sunny Boy 5000TL
All of
SMA Sunny Boy 1.5 Firmware
SMA Sunny Boy 1.5 Firmware
All of
SMA Sunny Boy Storage 2.5 Firmware
SMA Sunny Boy Storage 2.5 Firmware
All of
SMA Sunny Boy 3.0 Firmware
SMA Sunny Boy 3.0 Firmware
All of
SMA Sunny Boy 3.6
Sma Sunny Boy 3.6 Firmware
All of
SMA Sunny Boy 4.0 Firmware
SMA Sunny Boy 4.0 Firmware
All of
Sma Sunny Boy 5.0
SMA Sunny Boy 5000TL
All of
SMA Sunny Central 2200 Firmware
SMA Sunny Central 2200 Firmware
All of
SMA Sunny Central 1000CP XT Firmware
SMA Sunny Central 1000CP XT Firmware
All of
SMA Sunny Central 800CP XT Firmware
SMA Sunny Central 800CP XT Firmware
All of
SMA Sunny Central 850CP XT Firmware
SMA Sunny Central 850CP XT Firmware
All of
Sma Sunny Central 900cp Xt Firmware
Sma Sunny Central 900cp Xt Firmware
All of
SMA Sunny Central 500CP XT Firmware
SMA Sunny Central 500cp Xt
All of
Sma Sunny Central 630cp Xt Firmware
Sma Sunny Central 630cp Xt Firmware
All of
SMA Sunny Central 720CP Xt
SMA Sunny Central 720CP Xt
All of
SMA Sunny Central 760CP XT Firmware
SMA Sunny Central 760CP XT Firmware
All of
Sma Sunny Central Storage 500 Firmware
Sma Sunny Central Storage 500 Firmware
All of
Sma Sunny Central Storage 630 Firmware
Sma Sunny Central Storage 630 Firmware
All of
SMA Sunny Central Storage 720
SMA Sunny Central Storage 720
All of
SMA Sunny Central Storage 760 Firmware
SMA Sunny Central Storage 760 Firmware
All of
SMA Sunny Central Storage 800 Firmware
SMA Sunny Central Storage 800 Firmware
All of
SMA Sunny Central Storage 850 Firmware
SMA Sunny Central Storage 850 Firmware
All of
SMA Sunny Central Storage 900
Sma Sunny Central Storage 900 Firmware
All of
Sma Sunny Central Storage 1000 Firmware
SMA Sunny Central Storage 1000
All of
Sma Sunny Central Storage 2200 Firmware
SMA Sunny Central Storage 2200
All of
SMA Sunny Central Storage 2500-EV Firmware
SMA Sunny Central Storage 2500-eV
All of
SMA Sunny Boy Storage 2.5 Firmware
SMA Sunny Boy Storage 2.5

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the severity of CVE-2017-9853?

    CVE-2017-9853 is classified as a low severity vulnerability due to its weak password policy.

  • How do I fix CVE-2017-9853?

    To mitigate CVE-2017-9853, it is recommended to enhance the password policy by enforcing complexity and length requirements.

  • Which products are affected by CVE-2017-9853?

    Products affected by CVE-2017-9853 include various SMA Solar Technology inverters like Sunny Boy and Sunny Tripower models.

  • What can attackers do with CVE-2017-9853?

    Attackers could exploit CVE-2017-9853 to gain unauthorized access to affected SMA inverters due to weak passwords.

  • Are there patches available for CVE-2017-9853?

    Currently, SMA Solar Technology has not released specific patches to address CVE-2017-9853.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203