Vulnerability in SMA Solar Technology Products: Unauthorized Time Modification

CVE-2017-9864

What is CVE-2017-9864?

An identified issue in SMA Solar Technology products allows an attacker to modify the plant time without any authentication. While this alteration may influence log-entry timestamps and consequently impact data analysis reliability, the vendor notes that these changes are primarily limited to log timestamps and are corrected later through Network Time Protocol (NTP) synchronization. Notably, the potential impact on lockout policies and random-number generators has been downplayed, indicating that the security implications may be less severe than initially perceived. The vulnerability specifically affects the Sunny Boy TLST-21, TL-21, and Sunny Tripower TL-10 and TL-30 models.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References