CVE-2017-9859

CVE-2017-9859 concerns SMA Solar Technology inverters (Sunny Boy TLST-21/TL-21 and Sunny Tripower TL-10/TL-30). The issue is use of a weak hashing algorithm to encrypt passwords for REGISTER requests, which can be cracked offline, enabling an attacker to recover the password and register at SMA s...

CVE-2017-9861

The CVE-2017-9861 impact concerns SMA Solar Technology products (Sunny Boy TLST-21/TL-21 and Sunny Tripower TL-10/TL-30) where the SIP channel lacks proper authentication with encryption. The underlying issue allows replay, packet injection, and man-in-the-middle attacks, enabling an attacker on ...

CVE-2017-9857

An issue was discovered in SMA Solar Technology products. The SMAdata2+ communication protocol does not properly use authentication with encryption: it is vulnerable to man in the middle, packet injection, and replay attacks. Any setting change, authentication packet, scouting packet, etc. can be...

CVE-2017-9861

An issue was discovered in SMA Solar Technology products. The SIP implementation does not properly use authentication with encryption: it is vulnerable to replay attacks, packet injection attacks, and man in the middle attacks. An attacker is able to successfully use SIP to communicate with the...

CVE-2017-9864

Summary of CVE-2017-9864 (SMA Solar Technology inverter/time setting issue) : An attacker can change the plant time on SMA Solar Technology inverters (notably Sunny Boy TLST-21/TL-21 and Sunny Tripower TL-10/TL-30) without authentication, causing the system time to shift. This can affect timestam...

CVE-2017-9861

An issue was discovered in SMA Solar Technology products. The SIP implementation does not properly use authentication with encryption: it is vulnerable to replay attacks, packet injection attacks, and man in the middle attacks. An attacker is able to successfully use SIP to communicate with the...

CVE-2017-9858

CVE-2017-9858 affects SMA Solar Technology inverters (Sunny Boy TLST-21, TL-21; Sunny Tripower TL-10, TL-30). By sending crafted packets to the inverter and observing responses, an attacker can determine which user accounts are active or inactive, enabling brute-force planning. The vendor notes t...

CVE-2017-9853

An issue was discovered in SMA Solar Technology products. All inverters have a very weak password policy for the user and installer password. No complexity requirements or length requirements are set. Also, strong passwords are impossible due to a maximum of 12 characters and a limited set of...

CVE-2017-9858

An issue was discovered in SMA Solar Technology products. By sending crafted packets to an inverter and observing the response, active and inactive user accounts can be determined. This aids in further attacks such as a brute force attack as one now knows exactly which users exist and which do no...

CVE-2017-9862

SMA Solar Technology Sunny Explorer information-disclosure (CVE-2017-9862) affects Sunny Boy TLST-21/TL-21 and Sunny Tripower TL-10/TL-30. When signing in with an incorrect password, a debug report can be created that exposes application information and allows saving a .txt file with arbitrary co...

CVE-2017-9851

CVE-2017-9851 affects SMA Solar Technology Sunny Explorer; vulnerability arises when nonsense data is sent or a TELNET session is opened to the Sunny Explorer database port, causing the application to crash. Affected products/versions include Sunny Boy TLST-21 and TL-21, and Sunny Tripower TL-10 ...

CVE-2017-9856

An issue was discovered in SMA Solar Technology products. Sniffed passwords from SMAdata2+ communication can be decrypted very easily. The passwords are "encrypted" using a very simple encryption algorithm. This enables an attacker to find the plaintext passwords and authenticate to the device...

CVE-2017-9852

An Incorrect Password Management issue was discovered in SMA Solar Technology products. Default passwords exist that are rarely changed. User passwords will almost always be default. Installer passwords are expected to be default or similar across installations installed by the same company but a...

CVE-2017-9857

An issue was discovered in SMA Solar Technology products. The SMAdata2+ communication protocol does not properly use authentication with encryption: it is vulnerable to man in the middle, packet injection, and replay attacks. Any setting change, authentication packet, scouting packet, etc. can be...

CVE-2017-9854

An issue was discovered in SMA Solar Technology products. By sniffing for specific packets on the localhost, plaintext passwords can be obtained as they are typed into Sunny Explorer by the user. These passwords can then be used to compromise the overall device. NOTE: the vendor reports that...

CVE-2017-9863

An issue was discovered in SMA Solar Technology products. If a user simultaneously has Sunny Explorer running and visits a malicious host, cross-site request forgery can be used to change settings in the inverters for example, issuing a POST request to change the user password. All Sunny Explorer...

CVE-2017-9856

An issue was discovered in SMA Solar Technology products. Sniffed passwords from SMAdata2+ communication can be decrypted very easily. The passwords are "encrypted" using a very simple encryption algorithm. This enables an attacker to find the plaintext passwords and authenticate to the device...

CVE-2017-9857

The vulnerability CVE-2017-9857 in SMA Solar Technology products stems from the SMAdata2+ protocol: it does not properly use authentication with encryption, making it vulnerable to man-in-the-middle, packet injection, and replay attacks. Affected are Sunny Boy TLST-21/TL-21 and Sunny Tripower TL-...

CVE-2017-9851

An issue was discovered in SMA Solar Technology products. By sending nonsense data or setting up a TELNET session to the database port of Sunny Explorer, the application can be crashed. NOTE: the vendor reports that the maximum possible damage is a communication failure. Also, only Sunny Boy...

CVE-2017-9852

CVE-2017-9852 affects SMA Solar Technology products (notably Sunny Boy TLST-21/TL-21 and Sunny Tripower TL-10/TL-30). It describes an Incorrect Password Management issue: default passwords are rarely changed; user passwords are often default; installer passwords are often default or similar acros...