Weak Password Encryption in SMA Solar Technology Inverters

CVE-2017-9859

What is CVE-2017-9859?

An identified vulnerability in SMA Solar Technology's inverters arises from the use of a weak hashing algorithm employed for encrypting passwords during REGISTER requests. This vulnerability allows attackers to potentially crack passwords using offline tools. Successful exploitation could enable malicious actors to register on SMA servers, raising security concerns for users. Despite the vendor's assertion that the likelihood of such attacks is low, the issue remains critical for users of the affected inverter models.

References