CVE-2017-9854

9.8 criticalEPSS 1.1%

An issue was discovered in SMA Solar Technology products. By sniffing for specific packets on the localhost, plaintext passwords can be obtained as they are typed into Sunny Explorer by the user. These passwords can then be used to compromise the overall device. NOTE: the vendor reports that exploitation likelihood is low because these packets are usually sent only once during installation. Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
CWE: CWE-311
Published: 2017-08-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sma:sunny_boy_1.5_firmware
sma:sunny_boy_2.5_firmware
sma:sunny_boy_3.0_firmware
sma:sunny_boy_3.6_firmware
sma:sunny_boy_3000tl_firmware
sma:sunny_boy_3600_firmware
sma:sunny_boy_3600tl_firmware
sma:sunny_boy_4.0_firmware
sma:sunny_boy_4000tl_firmware
sma:sunny_boy_5.0_firmware
sma:sunny_boy_5000_firmware
sma:sunny_boy_5000tl_firmware
sma:sunny_boy_storage_2.5_firmware
sma:sunny_central_1000cp_xt_firmware
sma:sunny_central_2200_firmware
sma:sunny_central_500cp_xt_firmware
sma:sunny_central_630cp_xt_firmware
sma:sunny_central_720cp_xt_firmware
sma:sunny_central_760cp_xt_firmware
sma:sunny_central_800cp_xt_firmware
sma:sunny_central_850cp_xt_firmware
sma:sunny_central_900cp_xt_firmware
sma:sunny_central_storage_1000_firmware
sma:sunny_central_storage_2200_firmware
sma:sunny_central_storage_2500-ev_firmware
sma:sunny_central_storage_500_firmware
sma:sunny_central_storage_630_firmware
sma:sunny_central_storage_720_firmware
sma:sunny_central_storage_760_firmware
sma:sunny_central_storage_800_firmware
sma:sunny_central_storage_850_firmware
sma:sunny_central_storage_900_firmware
sma:sunny_tripower_12000tl_firmware
sma:sunny_tripower_15000tl_firmware
sma:sunny_tripower_20000tl_firmware
sma:sunny_tripower_25000tl_firmware
sma:sunny_tripower_5000tl_firmware
sma:sunny_tripower_60_firmware
sma:sunny_tripower_core1_firmware

References

Check your stack JSON