CVE-2017-9855
First published: Sat Aug 05 2017(Updated: )
** DISPUTED ** An issue was discovered in SMA Solar Technology products. A secondary authentication system is available for Installers called the Grid Guard system. This system uses predictable codes, and a single Grid Guard code can be used on any SMA inverter. Any such code, when combined with the installer account, allows changing very sensitive parameters. NOTE: the vendor reports that Grid Guard is not an authentication feature; it is only a tracing feature. Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| SMA Sunny Boy 3600 Firmware | ||
| SMA Sunny Boy 3600 Firmware | ||
| All of | ||
| SMA Sunny Boy 5000 Firmware | ||
| SMA Sunny Boy 5.0 | ||
| All of | ||
| SMA Sunny Tripower Core1 Firmware | ||
| SMA Sunny Tripower Core1 | ||
| All of | ||
| SMA Sunny Tripower 15000TL Firmware | ||
| SMA Sunny Tripower 15000TL Firmware | ||
| All of | ||
| SMA Sunny Tripower | ||
| SMA Sunny Tripower 20000TL Firmware | ||
| All of | ||
| SMA Sunny Tripower 25000TL Firmware | ||
| SMA Sunny Tripower 25000TL | ||
| All of | ||
| SMA Sunny Tripower 5000TL | ||
| SMA Sunny Tripower 5000TL | ||
| All of | ||
| SMA Sunny Tripower 12000TL | ||
| SMA Sunny Tripower 12000TL Firmware | ||
| All of | ||
| SMA Sunny Tripower | ||
| SMA Sunny Tripower 60 Firmware | ||
| All of | ||
| SMA Sunny Boy 3000TL | ||
| SMA Sunny Boy 3000TL | ||
| All of | ||
| SMA Sunny Boy 3600 Firmware | ||
| SMA Sunny Boy 3600 | ||
| All of | ||
| SMA Sunny Boy 4000TL Firmware | ||
| SMA Sunny Boy 4000TL Firmware | ||
| All of | ||
| SMA Sunny Boy 5000TL | ||
| SMA Sunny Boy 5000TL Firmware | ||
| All of | ||
| SMA Sunny Boy | ||
| SMA Sunny Boy 1.5 Firmware | ||
| All of | ||
| SMA Sunny Boy | ||
| SMA Sunny Boy 2.5 Firmware | ||
| All of | ||
| SMA Sunny Boy | ||
| SMA Sunny Boy 3.0 Firmware | ||
| All of | ||
| SMA Sunny Boy 3600 | ||
| SMA Sunny Boy 3.6 Firmware | ||
| All of | ||
| SMA Sunny Boy 4000TL Firmware | ||
| SMA Sunny Boy 4.0 Firmware | ||
| All of | ||
| Sma Sunny Boy 5.0 | ||
| SMA Sunny Boy 5.0 | ||
| All of | ||
| SMA Sunny Central 2200 Firmware | ||
| SMA Sunny Central 2200 Firmware | ||
| All of | ||
| SMA Sunny Central 1000CP XT | ||
| SMA Sunny Central 1000CP XT Firmware | ||
| All of | ||
| SMA Sunny Central 800CP XT Firmware | ||
| SMA Sunny Central 800CP XT Firmware | ||
| All of | ||
| SMA Sunny Central 850CP XT Firmware | ||
| SMA Sunny Central 850CP XT Firmware | ||
| All of | ||
| SMA Sunny Central 900CP XT Firmware | ||
| SMA Sunny Central 900CP XT Firmware | ||
| All of | ||
| SMA Sunny Central 500CP XT Firmware | ||
| SMA Sunny Central 500CP XT Firmware | ||
| All of | ||
| SMA Sunny Central 630CP XT Firmware | ||
| Sma Sunny Central 630cp Xt Firmware | ||
| All of | ||
| SMA Sunny Central 720CP Xt | ||
| SMA Sunny Central 720CP XT Firmware | ||
| All of | ||
| SMA Sunny Central 760CP XT Firmware | ||
| SMA Sunny Central 760CP XT Firmware | ||
| All of | ||
| SMA Sunny Central Storage 500 Firmware | ||
| SMA Sunny Central Storage 500 Firmware | ||
| All of | ||
| SMA Sunny Central Storage 630 Firmware | ||
| SMA Sunny Central Storage 630 Firmware | ||
| All of | ||
| SMA Sunny Central Storage 720 | ||
| SMA Sunny Central Storage 720 Firmware | ||
| All of | ||
| SMA Sunny Central Storage 760 Firmware | ||
| SMA Sunny Central Storage 760 Firmware | ||
| All of | ||
| SMA Sunny Central Storage 800 Firmware | ||
| SMA Sunny Central Storage 800 Firmware | ||
| All of | ||
| SMA Sunny Central Storage 850 Firmware | ||
| SMA Sunny Central Storage 850 Firmware | ||
| All of | ||
| SMA Sunny Central Storage 900 Firmware | ||
| Sma Sunny Central Storage 900 Firmware | ||
| All of | ||
| Sma Sunny Central Storage 1000 Firmware | ||
| Sma Sunny Central Storage 1000 Firmware | ||
| All of | ||
| SMA Sunny Central Storage 2200 | ||
| SMA Sunny Central Storage 2200 Firmware | ||
| All of | ||
| SMA Sunny Central Storage 2500-eV | ||
| SMA Sunny Central Storage 2500-EV Firmware | ||
| All of | ||
| SMA Sunny Boy Storage 2.5 Firmware | ||
| SMA Sunny Boy Storage 2.5 Firmware | ||
| SMA Sunny Boy 3600 Firmware | ||
| SMA Sunny Boy 3600 Firmware | ||
| SMA Sunny Boy 5000 Firmware | ||
| SMA Sunny Boy 5.0 | ||
| SMA Sunny Tripower Core1 Firmware | ||
| SMA Sunny Tripower Core1 | ||
| SMA Sunny Tripower 15000TL Firmware | ||
| SMA Sunny Tripower 15000TL Firmware | ||
| SMA Sunny Tripower | ||
| SMA Sunny Tripower 20000TL Firmware | ||
| SMA Sunny Tripower 25000TL Firmware | ||
| SMA Sunny Tripower 25000TL | ||
| SMA Sunny Tripower 5000TL | ||
| SMA Sunny Tripower 5000TL | ||
| SMA Sunny Tripower 12000TL | ||
| SMA Sunny Tripower 12000TL Firmware | ||
| SMA Sunny Tripower | ||
| SMA Sunny Tripower 60 Firmware | ||
| SMA Sunny Boy 3000TL | ||
| SMA Sunny Boy 3000TL | ||
| SMA Sunny Boy 3600 Firmware | ||
| SMA Sunny Boy 3600 | ||
| SMA Sunny Boy 4000TL Firmware | ||
| SMA Sunny Boy 4000TL Firmware | ||
| SMA Sunny Boy 5000TL | ||
| SMA Sunny Boy 5000TL Firmware | ||
| SMA Sunny Boy | ||
| SMA Sunny Boy 1.5 Firmware | ||
| SMA Sunny Boy | ||
| SMA Sunny Boy 2.5 Firmware | ||
| SMA Sunny Boy | ||
| SMA Sunny Boy 3.0 Firmware | ||
| SMA Sunny Boy 3600 | ||
| SMA Sunny Boy 3.6 Firmware | ||
| SMA Sunny Boy 4000TL Firmware | ||
| SMA Sunny Boy 4.0 Firmware | ||
| Sma Sunny Boy 5.0 | ||
| SMA Sunny Boy 5.0 | ||
| SMA Sunny Central 2200 Firmware | ||
| SMA Sunny Central 2200 Firmware | ||
| SMA Sunny Central 1000CP XT | ||
| SMA Sunny Central 1000CP XT Firmware | ||
| SMA Sunny Central 800CP XT Firmware | ||
| SMA Sunny Central 800CP XT Firmware | ||
| SMA Sunny Central 850CP XT Firmware | ||
| SMA Sunny Central 850CP XT Firmware | ||
| SMA Sunny Central 900CP XT Firmware | ||
| SMA Sunny Central 900CP XT Firmware | ||
| SMA Sunny Central 500CP XT Firmware | ||
| SMA Sunny Central 500CP XT Firmware | ||
| SMA Sunny Central 630CP XT Firmware | ||
| Sma Sunny Central 630cp Xt Firmware | ||
| SMA Sunny Central 720CP Xt | ||
| SMA Sunny Central 720CP XT Firmware | ||
| SMA Sunny Central 760CP XT Firmware | ||
| SMA Sunny Central 760CP XT Firmware | ||
| SMA Sunny Central Storage 500 Firmware | ||
| SMA Sunny Central Storage 500 Firmware | ||
| SMA Sunny Central Storage 630 Firmware | ||
| SMA Sunny Central Storage 630 Firmware | ||
| SMA Sunny Central Storage 720 | ||
| SMA Sunny Central Storage 720 Firmware | ||
| SMA Sunny Central Storage 760 Firmware | ||
| SMA Sunny Central Storage 760 Firmware | ||
| SMA Sunny Central Storage 800 Firmware | ||
| SMA Sunny Central Storage 800 Firmware | ||
| SMA Sunny Central Storage 850 Firmware | ||
| SMA Sunny Central Storage 850 Firmware | ||
| SMA Sunny Central Storage 900 Firmware | ||
| Sma Sunny Central Storage 900 Firmware | ||
| Sma Sunny Central Storage 1000 Firmware | ||
| Sma Sunny Central Storage 1000 Firmware | ||
| SMA Sunny Central Storage 2200 | ||
| SMA Sunny Central Storage 2200 Firmware | ||
| SMA Sunny Central Storage 2500-eV | ||
| SMA Sunny Central Storage 2500-EV Firmware | ||
| SMA Sunny Boy Storage 2.5 Firmware | ||
| SMA Sunny Boy Storage 2.5 Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-9855?
The severity of CVE-2017-9855 is considered to be medium due to the predictable codes used in the Grid Guard authentication system.
How do I fix CVE-2017-9855?
To fix CVE-2017-9855, ensure that a unique and complex Grid Guard code is used and regularly updated for your SMA inverters.
Which SMA products are affected by CVE-2017-9855?
CVE-2017-9855 affects various SMA products including the Sunny Boy and Sunny Tripower models that utilize the Grid Guard system.
What impact does CVE-2017-9855 have on SMA products?
CVE-2017-9855 could allow an unauthorized user to bypass security mechanisms via predictable Grid Guard codes, potentially leading to system manipulation.
Is there a patch available for CVE-2017-9855?
Currently, there is no official patch for CVE-2017-9855, but it is recommended to monitor SMA's security announcements for updates.
- agent/type
- agent/references
- agent/status
- agent/description
- agent/first-publish-date
- agent/severity
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/source
- agent/author
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/sma
- canonical/sma sunny boy 3600 firmware
- canonical/sma sunny boy 5000 firmware
- canonical/sma sunny boy 5.0
- canonical/sma sunny tripower core1 firmware
- canonical/sma sunny tripower core1
- canonical/sma sunny tripower 15000tl firmware
- canonical/sma sunny tripower
- canonical/sma sunny tripower 20000tl firmware
- canonical/sma sunny tripower 25000tl firmware
- canonical/sma sunny tripower 25000tl
- canonical/sma sunny tripower 5000tl
- canonical/sma sunny tripower 12000tl
- canonical/sma sunny tripower 12000tl firmware
- canonical/sma sunny tripower 60 firmware
- canonical/sma sunny boy 3000tl
- canonical/sma sunny boy 3600
- canonical/sma sunny boy 4000tl firmware
- canonical/sma sunny boy 5000tl
- canonical/sma sunny boy 5000tl firmware
- canonical/sma sunny boy
- canonical/sma sunny boy 1.5 firmware
- canonical/sma sunny boy 2.5 firmware
- canonical/sma sunny boy 3.0 firmware
- canonical/sma sunny boy 3.6 firmware
- canonical/sma sunny boy 4.0 firmware
- canonical/sma sunny central 2200 firmware
- canonical/sma sunny central 1000cp xt
- canonical/sma sunny central 1000cp xt firmware
- canonical/sma sunny central 800cp xt firmware
- canonical/sma sunny central 850cp xt firmware
- canonical/sma sunny central 900cp xt firmware
- canonical/sma sunny central 500cp xt firmware
- canonical/sma sunny central 630cp xt firmware
- canonical/sma sunny central 720cp xt
- canonical/sma sunny central 720cp xt firmware
- canonical/sma sunny central 760cp xt firmware
- canonical/sma sunny central storage 500 firmware
- canonical/sma sunny central storage 630 firmware
- canonical/sma sunny central storage 720
- canonical/sma sunny central storage 720 firmware
- canonical/sma sunny central storage 760 firmware
- canonical/sma sunny central storage 800 firmware
- canonical/sma sunny central storage 850 firmware
- canonical/sma sunny central storage 900 firmware
- canonical/sma sunny central storage 1000 firmware
- canonical/sma sunny central storage 2200
- canonical/sma sunny central storage 2200 firmware
- canonical/sma sunny central storage 2500-ev
- canonical/sma sunny central storage 2500-ev firmware
- canonical/sma sunny boy storage 2.5 firmware
- status/disputed