CVE-2017-9855

An issue was discovered in SMA Solar Technology products

Critical · published August 5, 2017

CVSS v3.1
9.8
EPSS
2%
Percentile
75.2
In the wild
Unconfirmed
What it is

🔥 A single predictable Grid Guard code could be your worst enemy! This vulnerability in SMA Solar Technology products lets anyone change sensitive settings with just a few keystrokes! Think of it like a restaurant where anyone with the same table number can change orders for every table — just a few digits, and suddenly your meal is spaghetti instead of steak! An attacker could gain full control over key settings of the affected SMA inverters, potentially leading to catastrophic energy outputs or even safety risks. This is absolutely devastating, as it poses a serious threat to both systems and safety. If exploited, it could allow unauthorized access to sensitive operational parameters.

Put simply

Think of it like a restaurant where anyone with the same table number can change orders for every table — just a few digits, and suddenly your meal is spaghetti instead of steak! This vulnerability in the Grid Guard system allows attackers to use predictable codes to change settings on the affected SMA inverters, which include Sunny Boy TLST-21 and TL-21 as well as Sunny Tripower TL-10 and TL-30 models.

What to do

An attacker could gain full control over key settings of the affected SMA inverters, potentially leading to catastrophic energy outputs or even safety risks. This is absolutely devastating, as it poses a serious threat to both systems and safety. If exploited, it could allow unauthorized access to sensitive operational parameters. Immediate action is crucial! Contact SMA Solar Technology to seek a security patch or guidance on enhancing security measures. Review your installations and consider disabling the Grid Guard system if possible. Always use unique codes that are not predictable! You've got this! By taking these steps, you can help secure your systems and protect your energy investments! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01583 · 75.2th percentile
Published
2017-08-05T17:00Z
EPSS history
Timeline
  • 05 AUG 17:00Z
    An issue was discovered in SMA Solar Technology products
    cvelistv5