Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

SMA inverters may reveal existing user accounts

CVE-2017-9858 · published 9 years ago
Summary

SMA Sunny Boy and Sunny Tripower inverters can be probed to discover which user names are active or inactive. This information could help attackers guess passwords more effectively. Apply the latest firmware updates and limit network access to the inverters to trusted devices only.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
sma sunny_boy_3.6_firmware All versions
cpe:2.3:o:sma:sunny_boy_3.6_firmware:-:*:*:*:*:*:*:*
sma sunny_boy_3600_firmware All versions
cpe:2.3:o:sma:sunny_boy_3600_firmware:-:*:*:*:*:*:*:*
sma sunny_boy_5000_firmware All versions
cpe:2.3:o:sma:sunny_boy_5000_firmware:-:*:*:*:*:*:*:*
sma sunny_tripower_core1_firmware All versions
cpe:2.3:o:sma:sunny_tripower_core1_firmware:-:*:*:*:*:*:*:*
sma sunny_tripower_15000tl_firmware All versions
cpe:2.3:o:sma:sunny_tripower_15000tl_firmware:-:*:*:*:*:*:*:*
sma sunny_tripower_20000tl_firmware All versions
cpe:2.3:o:sma:sunny_tripower_20000tl_firmware:-:*:*:*:*:*:*:*
sma sunny_tripower_25000tl_firmware All versions
cpe:2.3:o:sma:sunny_tripower_25000tl_firmware:-:*:*:*:*:*:*:*
sma sunny_tripower_5000tl_firmware All versions
cpe:2.3:o:sma:sunny_tripower_5000tl_firmware:-:*:*:*:*:*:*:*
sma sunny_tripower_12000tl_firmware All versions
cpe:2.3:o:sma:sunny_tripower_12000tl_firmware:-:*:*:*:*:*:*:*
sma sunny_tripower_60_firmware All versions
cpe:2.3:o:sma:sunny_tripower_60_firmware:-:*:*:*:*:*:*:*
sma sunny_boy_3000tl_firmware All versions
cpe:2.3:o:sma:sunny_boy_3000tl_firmware:-:*:*:*:*:*:*:*
sma sunny_boy_3600tl_firmware All versions
cpe:2.3:o:sma:sunny_boy_3600tl_firmware:-:*:*:*:*:*:*:*
sma sunny_boy_4000tl_firmware All versions
cpe:2.3:o:sma:sunny_boy_4000tl_firmware:-:*:*:*:*:*:*:*
sma sunny_boy_5000tl_firmware All versions
cpe:2.3:o:sma:sunny_boy_5000tl_firmware:-:*:*:*:*:*:*:*
sma sunny_boy_1.5_firmware All versions
cpe:2.3:o:sma:sunny_boy_1.5_firmware:-:*:*:*:*:*:*:*
sma sunny_boy_2.5_firmware All versions
cpe:2.3:o:sma:sunny_boy_2.5_firmware:-:*:*:*:*:*:*:*
sma sunny_boy_3.0_firmware All versions
cpe:2.3:o:sma:sunny_boy_3.0_firmware:-:*:*:*:*:*:*:*
sma sunny_boy_4.0_firmware All versions
cpe:2.3:o:sma:sunny_boy_4.0_firmware:-:*:*:*:*:*:*:*
sma sunny_boy_5.0_firmware All versions
cpe:2.3:o:sma:sunny_boy_5.0_firmware:-:*:*:*:*:*:*:*
sma sunny_central_2200_firmware All versions
cpe:2.3:o:sma:sunny_central_2200_firmware:-:*:*:*:*:*:*:*
sma sunny_central_1000cp_xt_firmware All versions
cpe:2.3:o:sma:sunny_central_1000cp_xt_firmware:-:*:*:*:*:*:*:*
sma sunny_central_800cp_xt_firmware All versions
cpe:2.3:o:sma:sunny_central_800cp_xt_firmware:-:*:*:*:*:*:*:*
sma sunny_central_850cp_xt_firmware All versions
cpe:2.3:o:sma:sunny_central_850cp_xt_firmware:-:*:*:*:*:*:*:*
sma sunny_central_900cp_xt_firmware All versions
cpe:2.3:o:sma:sunny_central_900cp_xt_firmware:-:*:*:*:*:*:*:*
sma sunny_central_500cp_xt_firmware All versions
cpe:2.3:o:sma:sunny_central_500cp_xt_firmware:-:*:*:*:*:*:*:*
sma sunny_central_630cp_xt_firmware All versions
cpe:2.3:o:sma:sunny_central_630cp_xt_firmware:-:*:*:*:*:*:*:*
sma sunny_central_720cp_xt_firmware All versions
cpe:2.3:o:sma:sunny_central_720cp_xt_firmware:-:*:*:*:*:*:*:*
sma sunny_central_760cp_xt_firmware All versions
cpe:2.3:o:sma:sunny_central_760cp_xt_firmware:-:*:*:*:*:*:*:*
sma sunny_central_storage_500_firmware All versions
cpe:2.3:o:sma:sunny_central_storage_500_firmware:-:*:*:*:*:*:*:*
sma sunny_central_storage_630_firmware All versions
cpe:2.3:o:sma:sunny_central_storage_630_firmware:-:*:*:*:*:*:*:*
sma sunny_central_storage_720_firmware All versions
cpe:2.3:o:sma:sunny_central_storage_720_firmware:-:*:*:*:*:*:*:*
sma sunny_central_storage_760_firmware All versions
cpe:2.3:o:sma:sunny_central_storage_760_firmware:-:*:*:*:*:*:*:*
sma sunny_central_storage_800_firmware All versions
cpe:2.3:o:sma:sunny_central_storage_800_firmware:-:*:*:*:*:*:*:*
sma sunny_central_storage_850_firmware All versions
cpe:2.3:o:sma:sunny_central_storage_850_firmware:-:*:*:*:*:*:*:*
sma sunny_central_storage_900_firmware All versions
cpe:2.3:o:sma:sunny_central_storage_900_firmware:-:*:*:*:*:*:*:*
sma sunny_central_storage_1000_firmware All versions
cpe:2.3:o:sma:sunny_central_storage_1000_firmware:-:*:*:*:*:*:*:*
sma sunny_central_storage_2200_firmware All versions
cpe:2.3:o:sma:sunny_central_storage_2200_firmware:-:*:*:*:*:*:*:*
sma sunny_central_storage_2500-ev_firmware All versions
cpe:2.3:o:sma:sunny_central_storage_2500-ev_firmware:-:*:*:*:*:*:*:*
sma sunny_boy_storage_2.5_firmware All versions
cpe:2.3:o:sma:sunny_boy_storage_2.5_firmware:-:*:*:*:*:*:*:*
Original advisory text
An issue was discovered in SMA Solar Technology products. By sending crafted packets to an inverter and observing the response, active and inactive user accounts can be determined. This aids in fur...
An issue was discovered in SMA Solar Technology products. By sending crafted packets to an inverter and observing the response, active and inactive user accounts can be determined. This aids in further attacks (such as a brute force attack) as one now knows exactly which users exist and which do not. NOTE: the vendor's position is that this "is not a security gap per se." Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
2% chance of attack within 30 days
Type
CWE-200Information Exposure
Timeline
Published5 Aug 2017
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2017-9858 · NVD
Track software like this
Free during beta