CVE-2017-9856
First published: Sat Aug 05 2017(Updated: )
** DISPUTED ** An issue was discovered in SMA Solar Technology products. Sniffed passwords from SMAdata2+ communication can be decrypted very easily. The passwords are "encrypted" using a very simple encryption algorithm. This enables an attacker to find the plaintext passwords and authenticate to the device. NOTE: the vendor reports that only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SMA Sunny Boy 3600 Firmware | ||
| SMA Sunny Boy 3600 Firmware | ||
| SMA Sunny Boy 5000 Firmware | ||
| SMA Sunny Boy 5000TL | ||
| SMA Sunny Tripower Core1 Firmware | ||
| SMA Sunny Tripower Core1 | ||
| SMA Sunny Tripower 15000TL Firmware | ||
| SMA Sunny Tripower 15000TL Firmware | ||
| SMA Sunny Tripower 20000TL Firmware | ||
| SMA Sunny Tripower 20000TL Firmware | ||
| SMA Sunny Tripower 25000TL Firmware | ||
| SMA Sunny Tripower 25000TL | ||
| SMA Sunny Tripower 5000TL | ||
| SMA Sunny Tripower 5000TL | ||
| SMA Sunny Tripower 12000TL | ||
| SMA Sunny Tripower 12000TL Firmware | ||
| SMA Sunny Tripower 60 | ||
| SMA Sunny Tripower 60 Firmware | ||
| SMA Sunny Boy 3000TL | ||
| SMA Sunny Boy 3000TL | ||
| SMA Sunny Boy 3600 Firmware | ||
| SMA Sunny Boy 3600 | ||
| SMA Sunny Boy 4000TL Firmware | ||
| SMA Sunny Boy 4000TL Firmware | ||
| SMA Sunny Boy 5000TL Firmware | ||
| SMA Sunny Boy 5000TL Firmware | ||
| SMA Sunny Boy 1.5 Firmware | ||
| SMA Sunny Boy 1.5 Firmware | ||
| SMA Sunny Boy 2.5 | ||
| SMA Sunny Boy 2.5 Firmware | ||
| SMA Sunny Boy 3.0 Firmware | ||
| SMA Sunny Boy 3.0 Firmware | ||
| SMA Sunny Boy 3.6 | ||
| Sma Sunny Boy 3.6 Firmware | ||
| SMA Sunny Boy 4.0 Firmware | ||
| SMA Sunny Boy 4.0 Firmware | ||
| Sma Sunny Boy 5.0 | ||
| SMA Sunny Boy 5000TL | ||
| SMA Sunny Central 2200 Firmware | ||
| SMA Sunny Central 2200 Firmware | ||
| SMA Sunny Central 1000CP XT | ||
| SMA Sunny Central 1000CP XT Firmware | ||
| SMA Sunny Central 800CP XT Firmware | ||
| SMA Sunny Central 800CP XT Firmware | ||
| SMA Sunny Central 850CP XT Firmware | ||
| SMA Sunny Central 850CP XT Firmware | ||
| Sma Sunny Central 900cp Xt Firmware | ||
| Sma Sunny Central 900cp Xt Firmware | ||
| SMA Sunny Central 500CP XT Firmware | ||
| SMA Sunny Central 500CP XT Firmware | ||
| Sma Sunny Central 630cp Xt Firmware | ||
| Sma Sunny Central 630cp Xt Firmware | ||
| SMA Sunny Central 720CP Xt | ||
| SMA Sunny Central 720CP XT Firmware | ||
| SMA Sunny Central 760CP XT Firmware | ||
| SMA Sunny Central 760CP XT Firmware | ||
| Sma Sunny Central Storage 500 Firmware | ||
| Sma Sunny Central Storage 500 Firmware | ||
| Sma Sunny Central Storage 630 Firmware | ||
| Sma Sunny Central Storage 630 Firmware | ||
| SMA Sunny Central Storage 720 | ||
| SMA Sunny Central Storage 720 Firmware | ||
| SMA Sunny Central Storage 760 Firmware | ||
| SMA Sunny Central Storage 760 Firmware | ||
| SMA Sunny Central Storage 800 Firmware | ||
| SMA Sunny Central Storage 800 Firmware | ||
| SMA Sunny Central Storage 850 Firmware | ||
| SMA Sunny Central Storage 850 Firmware | ||
| SMA Sunny Central Storage 900 | ||
| Sma Sunny Central Storage 900 Firmware | ||
| Sma Sunny Central Storage 1000 Firmware | ||
| SMA Sunny Central Storage 1000 | ||
| Sma Sunny Central Storage 2200 Firmware | ||
| SMA Sunny Central Storage 2200 | ||
| SMA Sunny Central Storage 2500-eV | ||
| SMA Sunny Central Storage 2500-EV Firmware | ||
| SMA Sunny Boy Storage 2.5 Firmware | ||
| SMA Sunny Boy Storage 2.5 Firmware | ||
| All of | ||
| SMA Sunny Boy 3600 Firmware | ||
| SMA Sunny Boy 3600 Firmware | ||
| All of | ||
| SMA Sunny Boy 5000TL | ||
| SMA Sunny Boy 5000 Firmware | ||
| All of | ||
| SMA Sunny Tripower Core1 | ||
| SMA Sunny Tripower Core1 Firmware | ||
| All of | ||
| SMA Sunny Tripower 15000TL Firmware | ||
| SMA Sunny Tripower 15000TL Firmware | ||
| All of | ||
| SMA Sunny Tripower 20000TL Firmware | ||
| SMA Sunny Tripower 20000TL Firmware | ||
| All of | ||
| SMA Sunny Tripower 25000TL Firmware | ||
| SMA Sunny Tripower 25000TL | ||
| All of | ||
| SMA Sunny Tripower 5000TL | ||
| SMA Sunny Tripower 5000TL | ||
| All of | ||
| SMA Sunny Tripower 12000TL | ||
| SMA Sunny Tripower 12000TL Firmware | ||
| All of | ||
| SMA Sunny Tripower 60 | ||
| SMA Sunny Tripower 60 Firmware | ||
| All of | ||
| SMA Sunny Boy 3000TL | ||
| SMA Sunny Boy 3000TL | ||
| All of | ||
| SMA Sunny Boy 3600 Firmware | ||
| SMA Sunny Boy 3600 | ||
| All of | ||
| SMA Sunny Boy 4000TL Firmware | ||
| SMA Sunny Boy 4000TL Firmware | ||
| All of | ||
| SMA Sunny Boy 5000TL Firmware | ||
| SMA Sunny Boy 5000TL Firmware | ||
| All of | ||
| SMA Sunny Boy 1.5 Firmware | ||
| SMA Sunny Boy 1.5 Firmware | ||
| All of | ||
| SMA Sunny Boy 2.5 | ||
| SMA Sunny Boy 2.5 Firmware | ||
| All of | ||
| SMA Sunny Boy 3.0 Firmware | ||
| SMA Sunny Boy 3.0 Firmware | ||
| All of | ||
| SMA Sunny Boy 3.6 | ||
| Sma Sunny Boy 3.6 Firmware | ||
| All of | ||
| SMA Sunny Boy 4.0 Firmware | ||
| SMA Sunny Boy 4.0 Firmware | ||
| All of | ||
| Sma Sunny Boy 5.0 | ||
| SMA Sunny Boy 5000TL | ||
| All of | ||
| SMA Sunny Central 2200 Firmware | ||
| SMA Sunny Central 2200 Firmware | ||
| All of | ||
| SMA Sunny Central 1000CP XT | ||
| SMA Sunny Central 1000CP XT Firmware | ||
| All of | ||
| SMA Sunny Central 800CP XT Firmware | ||
| SMA Sunny Central 800CP XT Firmware | ||
| All of | ||
| SMA Sunny Central 850CP XT Firmware | ||
| SMA Sunny Central 850CP XT Firmware | ||
| All of | ||
| Sma Sunny Central 900cp Xt Firmware | ||
| Sma Sunny Central 900cp Xt Firmware | ||
| All of | ||
| SMA Sunny Central 500CP XT Firmware | ||
| SMA Sunny Central 500CP XT Firmware | ||
| All of | ||
| Sma Sunny Central 630cp Xt Firmware | ||
| Sma Sunny Central 630cp Xt Firmware | ||
| All of | ||
| SMA Sunny Central 720CP Xt | ||
| SMA Sunny Central 720CP XT Firmware | ||
| All of | ||
| SMA Sunny Central 760CP XT Firmware | ||
| SMA Sunny Central 760CP XT Firmware | ||
| All of | ||
| Sma Sunny Central Storage 500 Firmware | ||
| Sma Sunny Central Storage 500 Firmware | ||
| All of | ||
| Sma Sunny Central Storage 630 Firmware | ||
| Sma Sunny Central Storage 630 Firmware | ||
| All of | ||
| SMA Sunny Central Storage 720 | ||
| SMA Sunny Central Storage 720 Firmware | ||
| All of | ||
| SMA Sunny Central Storage 760 Firmware | ||
| SMA Sunny Central Storage 760 Firmware | ||
| All of | ||
| SMA Sunny Central Storage 800 Firmware | ||
| SMA Sunny Central Storage 800 Firmware | ||
| All of | ||
| SMA Sunny Central Storage 850 Firmware | ||
| SMA Sunny Central Storage 850 Firmware | ||
| All of | ||
| Sma Sunny Central Storage 900 Firmware | ||
| SMA Sunny Central Storage 900 | ||
| All of | ||
| SMA Sunny Central Storage 1000 | ||
| Sma Sunny Central Storage 1000 Firmware | ||
| All of | ||
| SMA Sunny Central Storage 2200 | ||
| Sma Sunny Central Storage 2200 Firmware | ||
| All of | ||
| SMA Sunny Central Storage 2500-EV Firmware | ||
| SMA Sunny Central Storage 2500-eV | ||
| All of | ||
| SMA Sunny Boy Storage 2.5 Firmware | ||
| SMA Sunny Boy Storage 2.5 Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-9856?
The severity of CVE-2017-9856 is considered high due to the ease of decrypting passwords transmitted in SMA Solar Technology products.
How do I fix CVE-2017-9856?
To fix CVE-2017-9856, update the SMA Solar Technology firmware to the latest version that addresses this vulnerability.
Which SMA Solar products are affected by CVE-2017-9856?
The affected products include various SMA Solar inverters such as the Sunny Boy 3600 and Sunny Tripower models.
What type of vulnerability is CVE-2017-9856?
CVE-2017-9856 is a cryptographic weakness where intercepted passwords can be easily decrypted.
Can the CVE-2017-9856 vulnerability lead to unauthorized access?
Yes, CVE-2017-9856 can lead to unauthorized access if an attacker successfully decrypts the passwords.
- agent/type
- agent/references
- agent/status
- agent/description
- agent/first-publish-date
- agent/severity
- agent/weakness
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/author
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- status/disputed
- vendor/sma
- canonical/sma sunny boy 3600 firmware
- canonical/sma sunny boy 5000 firmware
- canonical/sma sunny boy 5000tl
- canonical/sma sunny tripower core1 firmware
- canonical/sma sunny tripower core1
- canonical/sma sunny tripower 15000tl firmware
- canonical/sma sunny tripower 20000tl firmware
- canonical/sma sunny tripower 25000tl firmware
- canonical/sma sunny tripower 25000tl
- canonical/sma sunny tripower 5000tl
- canonical/sma sunny tripower 12000tl
- canonical/sma sunny tripower 12000tl firmware
- canonical/sma sunny tripower 60
- canonical/sma sunny tripower 60 firmware
- canonical/sma sunny boy 3000tl
- canonical/sma sunny boy 3600
- canonical/sma sunny boy 4000tl firmware
- canonical/sma sunny boy 5000tl firmware
- canonical/sma sunny boy 1.5 firmware
- canonical/sma sunny boy 2.5
- canonical/sma sunny boy 2.5 firmware
- canonical/sma sunny boy 3.0 firmware
- canonical/sma sunny boy 3.6
- canonical/sma sunny boy 3.6 firmware
- canonical/sma sunny boy 4.0 firmware
- canonical/sma sunny boy 5.0
- canonical/sma sunny central 2200 firmware
- canonical/sma sunny central 1000cp xt
- canonical/sma sunny central 1000cp xt firmware
- canonical/sma sunny central 800cp xt firmware
- canonical/sma sunny central 850cp xt firmware
- canonical/sma sunny central 900cp xt firmware
- canonical/sma sunny central 500cp xt firmware
- canonical/sma sunny central 630cp xt firmware
- canonical/sma sunny central 720cp xt
- canonical/sma sunny central 720cp xt firmware
- canonical/sma sunny central 760cp xt firmware
- canonical/sma sunny central storage 500 firmware
- canonical/sma sunny central storage 630 firmware
- canonical/sma sunny central storage 720
- canonical/sma sunny central storage 720 firmware
- canonical/sma sunny central storage 760 firmware
- canonical/sma sunny central storage 800 firmware
- canonical/sma sunny central storage 850 firmware
- canonical/sma sunny central storage 900
- canonical/sma sunny central storage 900 firmware
- canonical/sma sunny central storage 1000 firmware
- canonical/sma sunny central storage 1000
- canonical/sma sunny central storage 2200 firmware
- canonical/sma sunny central storage 2200
- canonical/sma sunny central storage 2500-ev
- canonical/sma sunny central storage 2500-ev firmware
- canonical/sma sunny boy storage 2.5 firmware