CVE-2017-9852

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

An Incorrect Password Management issue was discovered in SMA Solar Technology products. Default passwords exist that are rarely changed. User passwords will almost always be default. Installer passwords are expected to be default or similar across installations installed by the same company (but are sometimes changed). Hidden user accounts have (at least in some cases, though more research is required to test this for all hidden user accounts) a fixed password for all devices; it can never be changed by a user. Other vulnerabilities exist that allow an attacker to get the passwords of these hidden user accounts. NOTE: the vendor reports that it has no influence on the allocation of passwords, and that global hardcoded master passwords do not exist. Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-798

Affected software

No affected versions have been published.

Timeline

Published
Aug 5, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-98539.8An issue was discovered in SMA Solar Technology products. All inverters have a very weak password policy for the user and installer passwordCVE-2017-98549.8An issue was discovered in SMA Solar Technology products. By sniffing for specific packets on the localhost, plaintext passwords can be obtaCVE-2017-98559.8An issue was discovered in SMA Solar Technology products. A secondary authentication system is available for Installers called the Grid GuarCVE-2017-98563.4An issue was discovered in SMA Solar Technology products. Sniffed passwords from SMAdata2+ communication can be decrypted very easily. The pCVE-2017-98578.1An issue was discovered in SMA Solar Technology products. The SMAdata2+ communication protocol does not properly use authentication with encCVE-2017-98587.5An issue was discovered in SMA Solar Technology products. By sending crafted packets to an inverter and observing the response, active and iCVE-2017-98599.8An issue was discovered in SMA Solar Technology products. The inverters make use of a weak hashing algorithm to encrypt the password for REGCVE-2017-98609.8An issue was discovered in SMA Solar Technology products. An attacker can use Sunny Explorer or the SMAdata2+ network protocol to update theCVE-2017-98619.8An issue was discovered in SMA Solar Technology products. The SIP implementation does not properly use authentication with encryption: it isCVE-2017-98627.5An issue was discovered in SMA Solar Technology products. When signed into Sunny Explorer with a wrong password, it is possible to create a CVE-2017-98638.8An issue was discovered in SMA Solar Technology products. If a user simultaneously has Sunny Explorer running and visits a malicious host, cCVE-2017-98647.5An issue was discovered in SMA Solar Technology products. An attacker can change the plant time even when not authenticated in any way. This
CVE-2017-9852: Critical severity, CVSS 9.8 | Vulnix