Vulnerability in SMA Solar Technology Products: Unauthorized Time Modification

CVE-2017-9864

What is CVE-2017-9864?

An identified issue in SMA Solar Technology products allows an attacker to modify the plant time without any authentication. While this alteration may influence log-entry timestamps and consequently impact data analysis reliability, the vendor notes that these changes are primarily limited to log timestamps and are corrected later through Network Time Protocol (NTP) synchronization. Notably, the potential impact on lockout policies and random-number generators has been downplayed, indicating that the security implications may be less severe than initially perceived. The vulnerability specifically affects the Sunny Boy TLST-21, TL-21, and Sunny Tripower TL-10 and TL-30 models.

References