CVE-2017-9854

CVE-2017-9854 affects SMA Solar Technology Sunny Explorer-related components. The issue allows an attacker to sniff specific localhost packets and read plaintext passwords as users type them into Sunny Explorer, potentially compromising the entire device. Affected products are Sunny Boy TLST-21/T...

CVE-2017-9857

An issue was discovered in SMA Solar Technology products. The SMAdata2+ communication protocol does not properly use authentication with encryption: it is vulnerable to man in the middle, packet injection, and replay attacks. Any setting change, authentication packet, scouting packet, etc. can be...

CVE-2017-9860

An issue was discovered in SMA Solar Technology products. An attacker can use Sunny Explorer or the SMAdata2+ network protocol to update the device firmware without ever having to authenticate. If an attacker is able to create a custom firmware version that is accepted by the inverter, the invert...

CVE-2017-9851

An issue was discovered in SMA Solar Technology products. By sending nonsense data or setting up a TELNET session to the database port of Sunny Explorer, the application can be crashed. NOTE: the vendor reports that the maximum possible damage is a communication failure. Also, only Sunny Boy...

CVE-2017-9854

An issue was discovered in SMA Solar Technology products. By sniffing for specific packets on the localhost, plaintext passwords can be obtained as they are typed into Sunny Explorer by the user. These passwords can then be used to compromise the overall device. NOTE: the vendor reports that...

PT-2017-19226 · Sma Solar Technology · Sunny Boy Tlst-21 +3

Name of the Vulnerable Software and Affected Versions: SMA Solar Technology products, specifically Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 Description: An issue allows an attacker to update device firmware without authentication using Sunny Explorer or the SMAdata2+ network...

PT-2017-19220 · Sma Solar Technology · Sunny Tripower +3

Name of the Vulnerable Software and Affected Versions: SMA Solar Technology products affected versions not specified Sunny Boy versions TLST-21 and TL-21 Sunny Tripower versions TL-10 and TL-30 Description: An issue was discovered in SMA Solar Technology products where plaintext passwords can be...

June 13, 2017—KB4022725 (OS Build 15063.413 and 15063.414)

None None...

June 13, 2017—KB4022715 (OS Build 14393.1358)

None None...

June 13, 2017—KB4022727 (OS Build 10240.17443)

None None...

Vulnerability of JavaScript handlers in Microsoft Edge and Internet Explorer browsers of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of Microsoft Edge and Internet Explorer JavaScript handlers arises from an operation going beyond the buffer boundaries due to a memory object processing error. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the current user...

The vulnerability of the Internet Explorer browser’s memory handler on the Windows operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Internet Explorer browser’s memory handler in the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

Vulnerability of JavaScript handlers in Microsoft Edge and Internet Explorer browsers of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of Microsoft Edge and Internet Explorer JavaScript handlers arises from an operation going beyond the buffer boundaries due to a memory object processing error. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the current user...

Vulnerability of JavaScript handlers in Microsoft Edge and Internet Explorer browsers of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of Microsoft Edge and Internet Explorer JavaScript handlers arises from an operation going beyond the buffer boundaries due to a memory object processing error. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the current user...

Vulnerability of Internet Explorer browser scripting handlers on the Windows operating system, allowing a hacker to execute arbitrary code

The vulnerability of Internet Explorer script handlers arises from an operation going beyond the buffer boundaries due to a memory object processing error. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the current user...

Internet Explorer mshtml.dll Memory Corruption Vulnerability

Added: 08/01/2017 CVE: CVE-2017-0037 BID: 96088 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem Microsoft Internet Explorer has two vulnerabilities in the way objects are handled in memory. The first, CVE-2017-0059, is an...

Internet Explorer mshtml.dll Memory Corruption Vulnerability

Added: 08/01/2017 CVE: CVE-2017-0037 BID: 96088 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem Microsoft Internet Explorer has two vulnerabilities in the way objects are handled in memory. The first, CVE-2017-0059, is an...

Internet Explorer mshtml.dll Memory Corruption Vulnerability

Added: 08/01/2017 CVE: CVE-2017-0037 BID: 96088 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem Microsoft Internet Explorer has two vulnerabilities in the way objects are handled in memory. The first, CVE-2017-0059, is an...

Microsoft scripting engine remote code execution vulnerability

Microsoft scripting engine is the United States Microsoft Microsoft company developed a for Microsoft Internet Explorer IE and Edge browser in the JavaScript engine. The Microsoft scripting engine suffers from a remote code execution vulnerability that stems from the program failing to properly...

Microsoft scripting engine information disclosure vulnerability

Microsoft scripting engine is the United States Microsoft Microsoft company developed a for Microsoft Internet Explorer IE and Edge browser in the JavaScript engine. An information disclosure vulnerability exists in Microsoft scripting engine. A remote attacker could exploit this vulnerability to...