CVE-2017-9860
Summary
| CVE | CVE-2017-9860 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2017-08-05 17:29:00 UTC |
| Updated | 2023-11-07 02:50:00 UTC |
| Description | ** DISPUTED ** An issue was discovered in SMA Solar Technology products. An attacker can use Sunny Explorer or the SMAdata2+ network protocol to update the device firmware without ever having to authenticate. If an attacker is able to create a custom firmware version that is accepted by the inverter, the inverter is compromised completely. This allows the attacker to do nearly anything: for example, giving access to the local OS, creating a botnet, using the inverters as a stepping stone into companies, etc. NOTE: the vendor reports that this attack has always been blocked by "a final integrity and compatibility check." Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected. |
Risk And Classification
Problem Types: CWE-287
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Sma | Sunny Boy 1.5 | - | All | All | All |
| Hardware | Sma | Sunny Boy 1.5 | - | All | All | All |
| Operating System | Sma | Sunny Boy 1.5 Firmware | - | All | All | All |
| Operating System | Sma | Sunny Boy 1.5 Firmware | - | All | All | All |
| Hardware | Sma | Sunny Boy 2.5 | - | All | All | All |
| Hardware | Sma | Sunny Boy 2.5 | - | All | All | All |
| Operating System | Sma | Sunny Boy 2.5 Firmware | - | All | All | All |
| Operating System | Sma | Sunny Boy 2.5 Firmware | - | All | All | All |
| Hardware | Sma | Sunny Boy 3.0 | - | All | All | All |
| Hardware | Sma | Sunny Boy 3.0 | - | All | All | All |
| Operating System | Sma | Sunny Boy 3.0 Firmware | - | All | All | All |
| Operating System | Sma | Sunny Boy 3.0 Firmware | - | All | All | All |
| Hardware | Sma | Sunny Boy 3.6 | - | All | All | All |
| Hardware | Sma | Sunny Boy 3.6 | - | All | All | All |
| Operating System | Sma | Sunny Boy 3.6 Firmware | - | All | All | All |
| Operating System | Sma | Sunny Boy 3.6 Firmware | - | All | All | All |
| Hardware | Sma | Sunny Boy 3000tl | - | All | All | All |
| Hardware | Sma | Sunny Boy 3000tl | - | All | All | All |
| Operating System | Sma | Sunny Boy 3000tl Firmware | - | All | All | All |
| Operating System | Sma | Sunny Boy 3000tl Firmware | - | All | All | All |
| Hardware | Sma | Sunny Boy 3600 | - | All | All | All |
| Hardware | Sma | Sunny Boy 3600 | - | All | All | All |
| Hardware | Sma | Sunny Boy 3600tl | - | All | All | All |
| Hardware | Sma | Sunny Boy 3600tl | - | All | All | All |
| Operating System | Sma | Sunny Boy 3600tl Firmware | - | All | All | All |
| Operating System | Sma | Sunny Boy 3600tl Firmware | - | All | All | All |
| Operating System | Sma | Sunny Boy 3600 Firmware | - | All | All | All |
| Operating System | Sma | Sunny Boy 3600 Firmware | - | All | All | All |
| Hardware | Sma | Sunny Boy 4.0 | - | All | All | All |
| Hardware | Sma | Sunny Boy 4.0 | - | All | All | All |
| Operating System | Sma | Sunny Boy 4.0 Firmware | - | All | All | All |
| Operating System | Sma | Sunny Boy 4.0 Firmware | - | All | All | All |
| Hardware | Sma | Sunny Boy 4000tl | - | All | All | All |
| Hardware | Sma | Sunny Boy 4000tl | - | All | All | All |
| Operating System | Sma | Sunny Boy 4000tl Firmware | - | All | All | All |
| Operating System | Sma | Sunny Boy 4000tl Firmware | - | All | All | All |
| Hardware | Sma | Sunny Boy 5.0 | - | All | All | All |
| Hardware | Sma | Sunny Boy 5.0 | - | All | All | All |
| Operating System | Sma | Sunny Boy 5.0 Firmware | - | All | All | All |
| Operating System | Sma | Sunny Boy 5.0 Firmware | - | All | All | All |
| Hardware | Sma | Sunny Boy 5000 | - | All | All | All |
| Hardware | Sma | Sunny Boy 5000 | - | All | All | All |
| Hardware | Sma | Sunny Boy 5000tl | - | All | All | All |
| Hardware | Sma | Sunny Boy 5000tl | - | All | All | All |
| Operating System | Sma | Sunny Boy 5000tl Firmware | - | All | All | All |
| Operating System | Sma | Sunny Boy 5000tl Firmware | - | All | All | All |
| Operating System | Sma | Sunny Boy 5000 Firmware | - | All | All | All |
| Operating System | Sma | Sunny Boy 5000 Firmware | - | All | All | All |
| Hardware | Sma | Sunny Boy Storage 2.5 | - | All | All | All |
| Hardware | Sma | Sunny Boy Storage 2.5 | - | All | All | All |
| Operating System | Sma | Sunny Boy Storage 2.5 Firmware | - | All | All | All |
| Operating System | Sma | Sunny Boy Storage 2.5 Firmware | - | All | All | All |
| Hardware | Sma | Sunny Central 1000cp Xt | - | All | All | All |
| Hardware | Sma | Sunny Central 1000cp Xt | - | All | All | All |
| Operating System | Sma | Sunny Central 1000cp Xt Firmware | - | All | All | All |
| Operating System | Sma | Sunny Central 1000cp Xt Firmware | - | All | All | All |
| Hardware | Sma | Sunny Central 2200 | - | All | All | All |
| Hardware | Sma | Sunny Central 2200 | - | All | All | All |
| Operating System | Sma | Sunny Central 2200 Firmware | - | All | All | All |
| Operating System | Sma | Sunny Central 2200 Firmware | - | All | All | All |
| Hardware | Sma | Sunny Central 500cp Xt | - | All | All | All |
| Hardware | Sma | Sunny Central 500cp Xt | - | All | All | All |
| Operating System | Sma | Sunny Central 500cp Xt Firmware | - | All | All | All |
| Operating System | Sma | Sunny Central 500cp Xt Firmware | - | All | All | All |
| Hardware | Sma | Sunny Central 630cp Xt | - | All | All | All |
| Hardware | Sma | Sunny Central 630cp Xt | - | All | All | All |
| Operating System | Sma | Sunny Central 630cp Xt Firmware | - | All | All | All |
| Operating System | Sma | Sunny Central 630cp Xt Firmware | - | All | All | All |
| Hardware | Sma | Sunny Central 720cp Xt | - | All | All | All |
| Hardware | Sma | Sunny Central 720cp Xt | - | All | All | All |
| Operating System | Sma | Sunny Central 720cp Xt Firmware | - | All | All | All |
| Operating System | Sma | Sunny Central 720cp Xt Firmware | - | All | All | All |
| Hardware | Sma | Sunny Central 760cp Xt | - | All | All | All |
| Hardware | Sma | Sunny Central 760cp Xt | - | All | All | All |
| Operating System | Sma | Sunny Central 760cp Xt Firmware | - | All | All | All |
| Operating System | Sma | Sunny Central 760cp Xt Firmware | - | All | All | All |
| Hardware | Sma | Sunny Central 800cp Xt | - | All | All | All |
| Hardware | Sma | Sunny Central 800cp Xt | - | All | All | All |
| Operating System | Sma | Sunny Central 800cp Xt Firmware | - | All | All | All |
| Operating System | Sma | Sunny Central 800cp Xt Firmware | - | All | All | All |
| Hardware | Sma | Sunny Central 850cp Xt | - | All | All | All |
| Hardware | Sma | Sunny Central 850cp Xt | - | All | All | All |
| Operating System | Sma | Sunny Central 850cp Xt Firmware | - | All | All | All |
| Operating System | Sma | Sunny Central 850cp Xt Firmware | - | All | All | All |
| Hardware | Sma | Sunny Central 900cp Xt | - | All | All | All |
| Hardware | Sma | Sunny Central 900cp Xt | - | All | All | All |
| Operating System | Sma | Sunny Central 900cp Xt Firmware | - | All | All | All |
| Operating System | Sma | Sunny Central 900cp Xt Firmware | - | All | All | All |
| Hardware | Sma | Sunny Central Storage 1000 | - | All | All | All |
| Hardware | Sma | Sunny Central Storage 1000 | - | All | All | All |
| Operating System | Sma | Sunny Central Storage 1000 Firmware | - | All | All | All |
| Operating System | Sma | Sunny Central Storage 1000 Firmware | - | All | All | All |
| Hardware | Sma | Sunny Central Storage 2200 | - | All | All | All |
| Hardware | Sma | Sunny Central Storage 2200 | - | All | All | All |
| Operating System | Sma | Sunny Central Storage 2200 Firmware | - | All | All | All |
| Operating System | Sma | Sunny Central Storage 2200 Firmware | - | All | All | All |
| Hardware | Sma | Sunny Central Storage 2500-ev | - | All | All | All |
| Hardware | Sma | Sunny Central Storage 2500-ev | - | All | All | All |
| Operating System | Sma | Sunny Central Storage 2500-ev Firmware | - | All | All | All |
| Operating System | Sma | Sunny Central Storage 2500-ev Firmware | - | All | All | All |
| Hardware | Sma | Sunny Central Storage 500 | - | All | All | All |
| Hardware | Sma | Sunny Central Storage 500 | - | All | All | All |
| Operating System | Sma | Sunny Central Storage 500 Firmware | - | All | All | All |
| Operating System | Sma | Sunny Central Storage 500 Firmware | - | All | All | All |
| Hardware | Sma | Sunny Central Storage 630 | - | All | All | All |
| Hardware | Sma | Sunny Central Storage 630 | - | All | All | All |
| Operating System | Sma | Sunny Central Storage 630 Firmware | - | All | All | All |
| Operating System | Sma | Sunny Central Storage 630 Firmware | - | All | All | All |
| Hardware | Sma | Sunny Central Storage 720 | - | All | All | All |
| Hardware | Sma | Sunny Central Storage 720 | - | All | All | All |
| Operating System | Sma | Sunny Central Storage 720 Firmware | - | All | All | All |
| Operating System | Sma | Sunny Central Storage 720 Firmware | - | All | All | All |
| Hardware | Sma | Sunny Central Storage 760 | - | All | All | All |
| Hardware | Sma | Sunny Central Storage 760 | - | All | All | All |
| Operating System | Sma | Sunny Central Storage 760 Firmware | - | All | All | All |
| Operating System | Sma | Sunny Central Storage 760 Firmware | - | All | All | All |
| Hardware | Sma | Sunny Central Storage 800 | - | All | All | All |
| Hardware | Sma | Sunny Central Storage 800 | - | All | All | All |
| Operating System | Sma | Sunny Central Storage 800 Firmware | - | All | All | All |
| Operating System | Sma | Sunny Central Storage 800 Firmware | - | All | All | All |
| Hardware | Sma | Sunny Central Storage 850 | - | All | All | All |
| Hardware | Sma | Sunny Central Storage 850 | - | All | All | All |
| Operating System | Sma | Sunny Central Storage 850 Firmware | - | All | All | All |
| Operating System | Sma | Sunny Central Storage 850 Firmware | - | All | All | All |
| Hardware | Sma | Sunny Central Storage 900 | - | All | All | All |
| Hardware | Sma | Sunny Central Storage 900 | - | All | All | All |
| Operating System | Sma | Sunny Central Storage 900 Firmware | - | All | All | All |
| Operating System | Sma | Sunny Central Storage 900 Firmware | - | All | All | All |
| Hardware | Sma | Sunny Tripower 12000tl | - | All | All | All |
| Hardware | Sma | Sunny Tripower 12000tl | - | All | All | All |
| Operating System | Sma | Sunny Tripower 12000tl Firmware | - | All | All | All |
| Operating System | Sma | Sunny Tripower 12000tl Firmware | - | All | All | All |
| Hardware | Sma | Sunny Tripower 15000tl | - | All | All | All |
| Hardware | Sma | Sunny Tripower 15000tl | - | All | All | All |
| Operating System | Sma | Sunny Tripower 15000tl Firmware | - | All | All | All |
| Operating System | Sma | Sunny Tripower 15000tl Firmware | - | All | All | All |
| Hardware | Sma | Sunny Tripower 20000tl | - | All | All | All |
| Hardware | Sma | Sunny Tripower 20000tl | - | All | All | All |
| Operating System | Sma | Sunny Tripower 20000tl Firmware | - | All | All | All |
| Operating System | Sma | Sunny Tripower 20000tl Firmware | - | All | All | All |
| Hardware | Sma | Sunny Tripower 25000tl | - | All | All | All |
| Hardware | Sma | Sunny Tripower 25000tl | - | All | All | All |
| Operating System | Sma | Sunny Tripower 25000tl Firmware | - | All | All | All |
| Operating System | Sma | Sunny Tripower 25000tl Firmware | - | All | All | All |
| Hardware | Sma | Sunny Tripower 5000tl | - | All | All | All |
| Hardware | Sma | Sunny Tripower 5000tl | - | All | All | All |
| Operating System | Sma | Sunny Tripower 5000tl Firmware | - | All | All | All |
| Operating System | Sma | Sunny Tripower 5000tl Firmware | - | All | All | All |
| Hardware | Sma | Sunny Tripower 60 | - | All | All | All |
| Hardware | Sma | Sunny Tripower 60 | - | All | All | All |
| Operating System | Sma | Sunny Tripower 60 Firmware | - | All | All | All |
| Operating System | Sma | Sunny Tripower 60 Firmware | - | All | All | All |
| Hardware | Sma | Sunny Tripower Core1 | - | All | All | All |
| Hardware | Sma | Sunny Tripower Core1 | - | All | All | All |
| Operating System | Sma | Sunny Tripower Core1 Firmware | - | All | All | All |
| Operating System | Sma | Sunny Tripower Core1 Firmware | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Statement on Cyber Security | SMA Solar | MISC | www.sma.de | |
| CVE-Information – Horus Scenario | MISC | horusscenario.com | Third Party Advisory |
| www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Wh... | MISC | www.sma.de | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.