SMA
SMA Sunny BOY 4.0 Firmware: vulnerabilidades y CVE
SMA Sunny BOY 4.0 Firmware tiene 12 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 7 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE12
Últimos 12 meses0
Críticas7
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2017-9864 | Alta (7.5) | 1.5% | — | 5 ago 2017 | An issue was discovered in SMA Solar Technology products. An attacker can change the plant time even when not authenticated in any way. This changes the system time, possibly affecting lockout policies and random-number… |
| CVE-2017-9863 | Alta (8.8) | 0.70% | — | 5 ago 2017 | An issue was discovered in SMA Solar Technology products. If a user simultaneously has Sunny Explorer running and visits a malicious host, cross-site request forgery can be used to change settings in the inverters (for… |
| CVE-2017-9861 | Crítica (9.8) | 1.4% | — | 5 ago 2017 | An issue was discovered in SMA Solar Technology products. The SIP implementation does not properly use authentication with encryption: it is vulnerable to replay attacks, packet injection attacks, and man in the middle… |
| CVE-2017-9860 | Crítica (9.8) | 2.2% | — | 5 ago 2017 | An issue was discovered in SMA Solar Technology products. An attacker can use Sunny Explorer or the SMAdata2+ network protocol to update the device firmware without ever having to authenticate. If an attacker is able to… |
| CVE-2017-9859 | Crítica (9.8) | 1.1% | — | 5 ago 2017 | An issue was discovered in SMA Solar Technology products. The inverters make use of a weak hashing algorithm to encrypt the password for REGISTER requests. This hashing algorithm can be cracked relatively easily. An… |
| CVE-2017-9858 | Alta (7.5) | 2.1% | — | 5 ago 2017 | An issue was discovered in SMA Solar Technology products. By sending crafted packets to an inverter and observing the response, active and inactive user accounts can be determined. This aids in further attacks (such as… |
| CVE-2017-9857 | Alta (8.1) | 0.69% | — | 5 ago 2017 | An issue was discovered in SMA Solar Technology products. The SMAdata2+ communication protocol does not properly use authentication with encryption: it is vulnerable to man in the middle, packet injection, and replay… |
| CVE-2017-9856 | Baja (3.4) | 0.66% | — | 5 ago 2017 | An issue was discovered in SMA Solar Technology products. Sniffed passwords from SMAdata2+ communication can be decrypted very easily. The passwords are "encrypted" using a very simple encryption algorithm. This enables… |
| CVE-2017-9855 | Crítica (9.8) | 1.6% | — | 5 ago 2017 | An issue was discovered in SMA Solar Technology products. A secondary authentication system is available for Installers called the Grid Guard system. This system uses predictable codes, and a single Grid Guard code can… |
| CVE-2017-9854 | Crítica (9.8) | 1.1% | — | 5 ago 2017 | An issue was discovered in SMA Solar Technology products. By sniffing for specific packets on the localhost, plaintext passwords can be obtained as they are typed into Sunny Explorer by the user. These passwords can… |
| CVE-2017-9853 | Crítica (9.8) | 1.7% | — | 5 ago 2017 | An issue was discovered in SMA Solar Technology products. All inverters have a very weak password policy for the user and installer password. No complexity requirements or length requirements are set. Also, strong… |
| CVE-2017-9852 | Crítica (9.8) | 1.7% | — | 5 ago 2017 | An Incorrect Password Management issue was discovered in SMA Solar Technology products. Default passwords exist that are rarely changed. User passwords will almost always be default. Installer passwords are expected to… |
Otros productos de SMA
Sunny BOY 3600tl Firmware · 12Sunny BOY 5000tl Firmware · 12Sunny BOY 3.0 Firmware · 12Sunny BOY 3600 Firmware · 12Sunny BOY 5.0 Firmware · 12Sunny BOY 5000 Firmware · 12Sunny BOY 1.5 Firmware · 12Sunny BOY 2.5 Firmware · 12Sunny BOY 3.6 Firmware · 12Sunny BOY 3000tl Firmware · 12Sunny BOY 4000tl Firmware · 12Sunny BOY Storage 2.5 Firmware · 12