CVE-2017-9858 in Solar Systeminformation

Résumé

par MITRE

An issue was discovered in SMA Solar Technology products. By sending crafted packets to an inverter and observing the response, active and inactive user accounts can be determined. This aids in further attacks (such as a brute force attack) as one now knows exactly which users exist and which do not.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Réserver

24/06/2017

Divulgation

05/08/2017

Modérer

accepté

Entrée

VDB-104872

CPE

prêt

EPSS

0.02058

KEV

non

Activités

très faible

Sources

Interested in the pricing of exploits?

See the underground prices here!