synced JUST NOW
01 Record

CVE-2017-9853

An issue was discovered in SMA Solar Technology products. All inverters have a very weak password policy for the user and installer password. No complexity requirements or length requirements are set.

UnratedPUBLISHEDCNA: mitre
CNA base scoreUnratedNo CNA CVSS vector

02 Description

An issue was discovered in SMA Solar Technology products. All inverters have a very weak password policy for the user and installer password. No complexity requirements or length requirements are set.

03 Exploitation and scoring

Exploitation
Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision
Not assessed by CISA
EPSS probability
1.71% probability of exploitation activity in the next 30 days.
EPSS percentile
Equal to or higher than the score of 76.9% of scored records. A rank, not a probability.
NVD base score
9.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD analysis status
Modified. NVD last modified this record on 2026-06-17.
Red Hat severity
No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published
2017-08-05 17:00Z9 YR AGO
Last updated
2024-08-05 17:18Z2 YR AGO
Reserved
2017-06-24
Assigning CNA
mitre
Record state
PUBLISHED
Severity
Not rated by the issuing CNA
CNA CVSS vector
Not published by the issuing CNA
Weaknesses
  • CWE-521Weak Password RequirementsBase
Data version
5.1
Document digest
d8a96f3b65733a0b90d04e36306411d97dfb14bb07d590b3babf7a740c53c043

05 Affected products

VendorProductVersionsPlatforms
smasunny_boy_1.5Not specified—
smasunny_boy_1.5_firmwareNot specified—
smasunny_boy_2.5Not specified—
smasunny_boy_2.5_firmwareNot specified—
smasunny_boy_3.0Not specified—
smasunny_boy_3.0_firmwareNot specified—
smasunny_boy_3.6Not specified—
smasunny_boy_3.6_firmwareNot specified—
smasunny_boy_3000tlNot specified—
smasunny_boy_3000tl_firmwareNot specified—
smasunny_boy_3600Not specified—
smasunny_boy_3600_firmwareNot specified—
smasunny_boy_3600tlNot specified—
smasunny_boy_3600tl_firmwareNot specified—
smasunny_boy_4.0Not specified—
smasunny_boy_4.0_firmwareNot specified—
smasunny_boy_4000tlNot specified—
smasunny_boy_4000tl_firmwareNot specified—
smasunny_boy_5.0Not specified—
smasunny_boy_5.0_firmwareNot specified—
smasunny_boy_5000Not specified—
smasunny_boy_5000_firmwareNot specified—
smasunny_boy_5000tlNot specified—
smasunny_boy_5000tl_firmwareNot specified—
smasunny_boy_storage_2.5Not specified—
smasunny_central_1000cp_xtNot specified—
smasunny_central_2200Not specified—
smasunny_central_2200_firmwareNot specified—
smasunny_central_500cp_xtNot specified—
smasunny_central_630cp_xtNot specified—
smasunny_central_720cp_xtNot specified—
smasunny_central_760cp_xtNot specified—
smasunny_central_800cp_xtNot specified—
smasunny_central_850cp_xtNot specified—
smasunny_central_900cp_xtNot specified—
smasunny_central_storage_1000Not specified—
smasunny_central_storage_2200Not specified—
smasunny_central_storage_500Not specified—
smasunny_central_storage_630Not specified—
smasunny_central_storage_720Not specified—
smasunny_central_storage_760Not specified—
smasunny_central_storage_800Not specified—

18 further entries not shown. The complete list is in the raw JSON document.

06 References