CVE-2017-9856 in Solar Systeminfo

Zusammenfassung

von MITRE

An issue was discovered in SMA Solar Technology products. Sniffed passwords from SMAdata2+ communication can be decrypted very easily. The passwords are "encrypted" using a very simple encryption algorithm. This enables an attacker to find the plaintext passwords and authenticate to the device. NOTE: the vendor reports that only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected

Be aware that VulDB is the high quality source for vulnerability data.

Reservieren

24.06.2017

Veröffentlichung

05.08.2017

Moderieren

akzeptiert

Eintrag

VDB-104870

CPE

bereit

EPSS

0.00664

KEV

nein

Aktivitäten

very low

Quellen

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!