Lucene search
MitreVULNRICHMENT:CVE-2017-9856HistoryAug 05, 2017 - 5:00 p.m.
CVE-2017-9856
2017-08-0517:00:00
mitre
github.com
4
AI Score
6.8
Confidence
Low
EPSS
0.002
Percentile
64.7%
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
An issue was discovered in SMA Solar Technology products. Sniffed passwords from SMAdata2+ communication can be decrypted very easily. The passwords are “encrypted” using a very simple encryption algorithm. This enables an attacker to find the plaintext passwords and authenticate to the device. NOTE: the vendor reports that only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected
ADP Affected
[
{
"cpes": [
"cpe:2.3:a:sma:sunny_boy_tl-21:*:*:*:*:*:*:*:*"
],
"vendor": "sma",
"product": "sunny_boy_tl-21",
"versions": [
{
"status": "affected",
"version": "*"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:a:sma:sunny_boy_tlst-21:*:*:*:*:*:*:*:*"
],
"vendor": "sma",
"product": "sunny_boy_tlst-21",
"versions": [
{
"status": "affected",
"version": "*"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:a:sma:sunny_tripower_tl-10:*:*:*:*:*:*:*:*"
],
"vendor": "sma",
"product": "sunny_tripower_tl-10",
"versions": [
{
"status": "affected",
"version": "*"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:a:sma:sunny_tripower_tl-30:*:*:*:*:*:*:*:*"
],
"vendor": "sma",
"product": "sunny_tripower_tl-30",
"versions": [
{
"status": "affected",
"version": "*"
}
],
"defaultStatus": "unknown"
}
]Related
prion
prion
Code injection
2017-08-05 17:29:00
cve
cve
CVE-2017-9856
2017-08-05 17:29:00
nvd
nvd
CVE-2017-9856
2017-08-05 17:29:00
cvelist
cvelist
CVE-2017-9856
2017-08-05 17:00:00
AI Score
6.8
Confidence
Low
EPSS
0.002
Percentile
64.7%
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2017-9856