CVE-2017-9851

An issue was discovered in SMA Solar Technology products. By sending nonsense data or setting up a TELNET session to the database port of Sunny Explorer, the application can be crashed. NOTE: the vendor reports that the maximum possible damage is a communication failure. Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2017-08-05

Last modified

2024-08-05

Affected products

• Sunny Explorer (Sma)

References

• http://www.sma.de/en/statement-on-cyber-security.html
• http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf
• https://horusscenario.com/CVE-information/