First published: Sat Aug 05 2017(Updated: )
** DISPUTED ** An issue was discovered in SMA Solar Technology products. All inverters have a very weak password policy for the user and installer password. No complexity requirements or length requirements are set. Also, strong passwords are impossible due to a maximum of 12 characters and a limited set of characters. NOTE: the vendor reports that the 12-character limit provides "a very high security standard." Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
SMA Sunny Boy 3600 Firmware | ||
Sma Sunny Boy 3600tl Firmware | ||
SMA Sunny Boy 5000 Firmware | ||
SMA Sunny Boy 5000TL | ||
SMA Sunny Tripower Core1 Firmware | ||
SMA Sunny Tripower Core1 | ||
SMA Sunny Tripower 15000TL Firmware | ||
SMA Sunny Tripower 15000TL Firmware | ||
SMA Sunny Tripower 20000TL Firmware | ||
SMA Sunny Tripower 20000TL | ||
SMA Sunny Tripower 25000TL Firmware | ||
SMA Sunny Tripower 25000TL | ||
SMA Sunny Tripower 5000TL | ||
SMA Sunny Tripower 5000TL | ||
SMA Sunny Tripower 12000TL Firmware | ||
SMA Sunny Tripower 12000TL Firmware | ||
SMA Sunny Tripower 60 | ||
SMA Sunny Tripower 60 | ||
SMA Sunny Boy 3000TL | ||
SMA Sunny Boy 3000TL | ||
Sma Sunny Boy 3600tl Firmware | ||
Sma Sunny Boy 3600tl Firmware | ||
SMA Sunny Boy 4000TL Firmware | ||
SMA Sunny Boy 4000TL Firmware | ||
SMA Sunny Boy 5000TL Firmware | ||
SMA Sunny Boy 5000TL | ||
SMA Sunny Boy 1.5 Firmware | ||
SMA Sunny Boy 1.5 Firmware | ||
SMA Sunny Boy Storage 2.5 Firmware | ||
SMA Sunny Boy Storage 2.5 Firmware | ||
SMA Sunny Boy 3.0 Firmware | ||
SMA Sunny Boy 3.0 Firmware | ||
SMA Sunny Boy 3.6 | ||
Sma Sunny Boy 3.6 Firmware | ||
SMA Sunny Boy 4.0 Firmware | ||
SMA Sunny Boy 4.0 Firmware | ||
Sma Sunny Boy 5.0 | ||
SMA Sunny Boy 5000TL | ||
SMA Sunny Central 2200 Firmware | ||
SMA Sunny Central 2200 Firmware | ||
SMA Sunny Central 1000CP XT Firmware | ||
SMA Sunny Central 1000CP XT Firmware | ||
SMA Sunny Central 800CP XT Firmware | ||
SMA Sunny Central 800CP XT Firmware | ||
SMA Sunny Central 850CP XT Firmware | ||
SMA Sunny Central 850CP XT Firmware | ||
Sma Sunny Central 900cp Xt Firmware | ||
Sma Sunny Central 900cp Xt Firmware | ||
SMA Sunny Central 500CP XT Firmware | ||
SMA Sunny Central 500cp Xt | ||
Sma Sunny Central 630cp Xt Firmware | ||
Sma Sunny Central 630cp Xt Firmware | ||
SMA Sunny Central 720CP Xt | ||
SMA Sunny Central 720CP Xt | ||
SMA Sunny Central 760CP XT Firmware | ||
SMA Sunny Central 760CP XT Firmware | ||
Sma Sunny Central Storage 500 Firmware | ||
Sma Sunny Central Storage 500 Firmware | ||
Sma Sunny Central Storage 630 Firmware | ||
Sma Sunny Central Storage 630 Firmware | ||
SMA Sunny Central Storage 720 | ||
SMA Sunny Central Storage 720 | ||
SMA Sunny Central Storage 760 Firmware | ||
SMA Sunny Central Storage 760 Firmware | ||
SMA Sunny Central Storage 800 Firmware | ||
SMA Sunny Central Storage 800 Firmware | ||
SMA Sunny Central Storage 850 Firmware | ||
SMA Sunny Central Storage 850 Firmware | ||
SMA Sunny Central Storage 900 | ||
Sma Sunny Central Storage 900 Firmware | ||
Sma Sunny Central Storage 1000 Firmware | ||
SMA Sunny Central Storage 1000 | ||
Sma Sunny Central Storage 2200 Firmware | ||
SMA Sunny Central Storage 2200 | ||
SMA Sunny Central Storage 2500-EV Firmware | ||
SMA Sunny Central Storage 2500-eV | ||
SMA Sunny Boy Storage 2.5 Firmware | ||
SMA Sunny Boy Storage 2.5 | ||
All of | ||
SMA Sunny Boy 3600 Firmware | ||
Sma Sunny Boy 3600tl Firmware | ||
All of | ||
SMA Sunny Boy 5000 Firmware | ||
SMA Sunny Boy 5000TL | ||
All of | ||
SMA Sunny Tripower Core1 Firmware | ||
SMA Sunny Tripower Core1 | ||
All of | ||
SMA Sunny Tripower 15000TL Firmware | ||
SMA Sunny Tripower 15000TL Firmware | ||
All of | ||
SMA Sunny Tripower 20000TL Firmware | ||
SMA Sunny Tripower 20000TL | ||
All of | ||
SMA Sunny Tripower 25000TL Firmware | ||
SMA Sunny Tripower 25000TL | ||
All of | ||
SMA Sunny Tripower 5000TL | ||
SMA Sunny Tripower 5000TL | ||
All of | ||
SMA Sunny Tripower 12000TL Firmware | ||
SMA Sunny Tripower 12000TL Firmware | ||
All of | ||
SMA Sunny Tripower 60 | ||
SMA Sunny Tripower 60 | ||
All of | ||
SMA Sunny Boy 3000TL | ||
SMA Sunny Boy 3000TL | ||
All of | ||
Sma Sunny Boy 3600tl Firmware | ||
Sma Sunny Boy 3600tl Firmware | ||
All of | ||
SMA Sunny Boy 4000TL Firmware | ||
SMA Sunny Boy 4000TL Firmware | ||
All of | ||
SMA Sunny Boy 5000TL Firmware | ||
SMA Sunny Boy 5000TL | ||
All of | ||
SMA Sunny Boy 1.5 Firmware | ||
SMA Sunny Boy 1.5 Firmware | ||
All of | ||
SMA Sunny Boy Storage 2.5 Firmware | ||
SMA Sunny Boy Storage 2.5 Firmware | ||
All of | ||
SMA Sunny Boy 3.0 Firmware | ||
SMA Sunny Boy 3.0 Firmware | ||
All of | ||
SMA Sunny Boy 3.6 | ||
Sma Sunny Boy 3.6 Firmware | ||
All of | ||
SMA Sunny Boy 4.0 Firmware | ||
SMA Sunny Boy 4.0 Firmware | ||
All of | ||
Sma Sunny Boy 5.0 | ||
SMA Sunny Boy 5000TL | ||
All of | ||
SMA Sunny Central 2200 Firmware | ||
SMA Sunny Central 2200 Firmware | ||
All of | ||
SMA Sunny Central 1000CP XT Firmware | ||
SMA Sunny Central 1000CP XT Firmware | ||
All of | ||
SMA Sunny Central 800CP XT Firmware | ||
SMA Sunny Central 800CP XT Firmware | ||
All of | ||
SMA Sunny Central 850CP XT Firmware | ||
SMA Sunny Central 850CP XT Firmware | ||
All of | ||
Sma Sunny Central 900cp Xt Firmware | ||
Sma Sunny Central 900cp Xt Firmware | ||
All of | ||
SMA Sunny Central 500CP XT Firmware | ||
SMA Sunny Central 500cp Xt | ||
All of | ||
Sma Sunny Central 630cp Xt Firmware | ||
Sma Sunny Central 630cp Xt Firmware | ||
All of | ||
SMA Sunny Central 720CP Xt | ||
SMA Sunny Central 720CP Xt | ||
All of | ||
SMA Sunny Central 760CP XT Firmware | ||
SMA Sunny Central 760CP XT Firmware | ||
All of | ||
Sma Sunny Central Storage 500 Firmware | ||
Sma Sunny Central Storage 500 Firmware | ||
All of | ||
Sma Sunny Central Storage 630 Firmware | ||
Sma Sunny Central Storage 630 Firmware | ||
All of | ||
SMA Sunny Central Storage 720 | ||
SMA Sunny Central Storage 720 | ||
All of | ||
SMA Sunny Central Storage 760 Firmware | ||
SMA Sunny Central Storage 760 Firmware | ||
All of | ||
SMA Sunny Central Storage 800 Firmware | ||
SMA Sunny Central Storage 800 Firmware | ||
All of | ||
SMA Sunny Central Storage 850 Firmware | ||
SMA Sunny Central Storage 850 Firmware | ||
All of | ||
SMA Sunny Central Storage 900 | ||
Sma Sunny Central Storage 900 Firmware | ||
All of | ||
Sma Sunny Central Storage 1000 Firmware | ||
SMA Sunny Central Storage 1000 | ||
All of | ||
Sma Sunny Central Storage 2200 Firmware | ||
SMA Sunny Central Storage 2200 | ||
All of | ||
SMA Sunny Central Storage 2500-EV Firmware | ||
SMA Sunny Central Storage 2500-eV | ||
All of | ||
SMA Sunny Boy Storage 2.5 Firmware | ||
SMA Sunny Boy Storage 2.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-9853 is classified as a low severity vulnerability due to its weak password policy.
To mitigate CVE-2017-9853, it is recommended to enhance the password policy by enforcing complexity and length requirements.
Products affected by CVE-2017-9853 include various SMA Solar Technology inverters like Sunny Boy and Sunny Tripower models.
Attackers could exploit CVE-2017-9853 to gain unauthorized access to affected SMA inverters due to weak passwords.
Currently, SMA Solar Technology has not released specific patches to address CVE-2017-9853.