CVE-2017-9853

9.8CRITICAL

An issue was discovered in SMA Solar Technology products. All inverters have a very weak password policy for the user and installer password. No complexity requirements or length requirements are set.

Опубликовано: 8/5/2017Обновлено: 4/20/2025

Описание

An issue was discovered in SMA Solar Technology products. All inverters have a very weak password policy for the user and installer password. No complexity requirements or length requirements are set. Also, strong passwords are impossible due to a maximum of 12 characters and a limited set of characters. NOTE: the vendor reports that the 12-character limit provides "a very high security standard." Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected

ИИ-АнализНа базе ИИ

Затронутые продукты

smasunny_boy_3600_firmware
-
smasunny_boy_3600
-
smasunny_boy_5000_firmware
-
smasunny_boy_5000
-
smasunny_tripower_core1_firmware
-
smasunny_tripower_core1
-
smasunny_tripower_15000tl_firmware
-
smasunny_tripower_15000tl
-
smasunny_tripower_20000tl_firmware
-
smasunny_tripower_20000tl
-
smasunny_tripower_25000tl_firmware
-
smasunny_tripower_25000tl
-
smasunny_tripower_5000tl_firmware
-
smasunny_tripower_5000tl
-
smasunny_tripower_12000tl_firmware
-
smasunny_tripower_12000tl
-
smasunny_tripower_60_firmware
-
smasunny_tripower_60
-
smasunny_boy_3000tl_firmware
-
smasunny_boy_3000tl
-
smasunny_boy_3600tl_firmware
-
smasunny_boy_3600tl
-
smasunny_boy_4000tl_firmware
-
smasunny_boy_4000tl
-
smasunny_boy_5000tl_firmware
-
smasunny_boy_5000tl
-
smasunny_boy_1.5_firmware
-
smasunny_boy_1.5
-
smasunny_boy_2.5_firmware
-
smasunny_boy_2.5
-
smasunny_boy_3.0_firmware
-
smasunny_boy_3.0
-
smasunny_boy_3.6_firmware
-
smasunny_boy_3.6
-
smasunny_boy_4.0_firmware
-
smasunny_boy_4.0
-
smasunny_boy_5.0_firmware
-
smasunny_boy_5.0
-
smasunny_central_2200_firmware
-
smasunny_central_2200
-
smasunny_central_1000cp_xt_firmware
-
smasunny_central_1000cp_xt
-
smasunny_central_800cp_xt_firmware
-
smasunny_central_800cp_xt
-
smasunny_central_850cp_xt_firmware
-
smasunny_central_850cp_xt
-
smasunny_central_900cp_xt_firmware
-
smasunny_central_900cp_xt
-
smasunny_central_500cp_xt_firmware
-
smasunny_central_500cp_xt
-
smasunny_central_630cp_xt_firmware
-
smasunny_central_630cp_xt
-
smasunny_central_720cp_xt_firmware
-
smasunny_central_720cp_xt
-
smasunny_central_760cp_xt_firmware
-
smasunny_central_760cp_xt
-
smasunny_central_storage_500_firmware
-
smasunny_central_storage_500
-
smasunny_central_storage_630_firmware
-
smasunny_central_storage_630
-
smasunny_central_storage_720_firmware
-
smasunny_central_storage_720
-
smasunny_central_storage_760_firmware
-
smasunny_central_storage_760
-
smasunny_central_storage_800_firmware
-
smasunny_central_storage_800
-
smasunny_central_storage_850_firmware
-
smasunny_central_storage_850
-
smasunny_central_storage_900_firmware
-
smasunny_central_storage_900
-
smasunny_central_storage_1000_firmware
-
smasunny_central_storage_1000
-
smasunny_central_storage_2200_firmware
-
smasunny_central_storage_2200
-
smasunny_central_storage_2500-ev_firmware
-
smasunny_central_storage_2500-ev
-
smasunny_boy_storage_2.5_firmware
-
smasunny_boy_storage_2.5
-

Ссылки