Weak Encryption Vulnerability in SMA Solar Technology Products

CVE-2017-9856

What is CVE-2017-9856?

A significant vulnerability has been identified in SMA Solar Technology products, where passwords transmitted via SMAdata2+ communication can be easily decrypted. The encryption method employed is overly simplistic, allowing attackers to retrieve plaintext passwords rapidly. This poses a risk of unauthorized access to devices, with the vendor indicating that the Sunny Boy TLST-21, TL-21, and Sunny Tripower TL-10 and TL-30 may be affected. It is advised that users adopt security measures to safeguard their systems against potential exploitation.

References