How severe is CVE-2017-9856?

CVE-2017-9856 has a CVSS 3.x base score of 3.4, rated low severity. It is exploitable over network with high attack complexity, requires no privileges and user interaction. Impact on confidentiality is low, integrity none, and availability none.

Is CVE-2017-9856 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (47th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2017-9856?

CVE-2017-9856 primarily affects Sma Sunny Boy 3600 Firmware. In total, 39 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2017-9856?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2017-9856 published?

CVE-2017-9856 was published on 2017-08-05 and last updated on 2026-06-17.

CVE-2017-9856

CVE-2017-9856 is a low-severity vulnerability in Sma Sunny Boy 3600 Firmware with a CVSS 3.x base score of 3.4. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-256.

Key facts

Severity: Low (CVSS 3.x base score 3.4)
CVSS v2: 5.0
EPSS exploit prediction: 1% (47th percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-256
Affected product: Sma Sunny Boy 3600 Firmware
Published: 2017-08-05
Last modified: 2026-06-17

Description

An issue was discovered in SMA Solar Technology products. Sniffed passwords from SMAdata2+ communication can be decrypted very easily. The passwords are "encrypted" using a very simple encryption algorithm. This enables an attacker to find the plaintext passwords and authenticate to the device. NOTE: the vendor reports that only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected

Frequently asked questions

What is CVE-2017-9856?: An issue was discovered in SMA Solar Technology products. Sniffed passwords from SMAdata2+ communication can be decrypted very easily. The passwords are "encrypted" using a very simple encryption algorithm. This enables an attacker to find the plaintext passwords and authenticate to the device. NOTE: the vendor reports that only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected
How severe is CVE-2017-9856?: CVE-2017-9856 has a CVSS 3.x base score of 3.4, rated low severity. It is exploitable over network with high attack complexity, requires no privileges and user interaction. Impact on confidentiality is low, integrity none, and availability none.
Is CVE-2017-9856 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (47th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2017-9856?: CVE-2017-9856 primarily affects Sma Sunny Boy 3600 Firmware. In total, 39 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2017-9856?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2017-9856 published?: CVE-2017-9856 was published on 2017-08-05 and last updated on 2026-06-17.

References

Affected products (39)

cpe:2.3:o:sma:sunny_boy_3600_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sma:sunny_boy_5000_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sma:sunny_tripower_core1_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sma:sunny_tripower_15000tl_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sma:sunny_tripower_20000tl_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sma:sunny_tripower_25000tl_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sma:sunny_tripower_5000tl_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sma:sunny_tripower_12000tl_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sma:sunny_tripower_60_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sma:sunny_boy_3000tl_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sma:sunny_boy_3600tl_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sma:sunny_boy_4000tl_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sma:sunny_boy_5000tl_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sma:sunny_boy_1.5_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sma:sunny_boy_2.5_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sma:sunny_boy_3.0_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sma:sunny_boy_3.6_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sma:sunny_boy_4.0_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sma:sunny_boy_5.0_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sma:sunny_central_2200_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sma:sunny_central_1000cp_xt_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sma:sunny_central_800cp_xt_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sma:sunny_central_850cp_xt_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sma:sunny_central_900cp_xt_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sma:sunny_central_500cp_xt_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sma:sunny_central_630cp_xt_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sma:sunny_central_720cp_xt_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sma:sunny_central_760cp_xt_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sma:sunny_central_storage_500_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sma:sunny_central_storage_630_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sma:sunny_central_storage_720_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sma:sunny_central_storage_760_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sma:sunny_central_storage_800_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sma:sunny_central_storage_850_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sma:sunny_central_storage_900_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sma:sunny_central_storage_1000_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sma:sunny_central_storage_2200_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sma:sunny_central_storage_2500-ev_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:sma:sunny_boy_storage_2.5_firmware:-:*:*:*:*:*:*:*

More vulnerabilities in Sma Sunny Boy 3600 Firmware

CVE-2017-9861 — Critical (CVSS 9.8): An issue was discovered in SMA Solar Technology products. The SIP implementation does not properly use authentication…
CVE-2017-9860 — Critical (CVSS 9.8): An issue was discovered in SMA Solar Technology products. An attacker can use Sunny Explorer or the SMAdata2+ network…
CVE-2017-9859 — Critical (CVSS 9.8): An issue was discovered in SMA Solar Technology products. The inverters make use of a weak hashing algorithm to encrypt…
CVE-2017-9855 — Critical (CVSS 9.8): An issue was discovered in SMA Solar Technology products. A secondary authentication system is available for Installers…
CVE-2017-9854 — Critical (CVSS 9.8): An issue was discovered in SMA Solar Technology products. By sniffing for specific packets on the localhost, plaintext…
CVE-2017-9853 — Critical (CVSS 9.8): An issue was discovered in SMA Solar Technology products. All inverters have a very weak password policy for the user…

All CVEs affecting Sma Sunny Boy 3600 Firmware →

Other CWE-256 vulnerabilities

CVE-2024-55026 — Critical (CVSS 9.8): An issue in the reset_pj.cgi endpoint of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized…
CVE-2025-6561 — Critical (CVSS 9.8): Certain hybrid DVR models ((HBF-09KD and HBF-16NK)) from Hunt Electronic have an Exposure of Sensitive Information…
CVE-2025-6560 — Critical (CVSS 9.8): Multiple wireless router models from Sapido have an Exposure of Sensitive Information vulnerability, allowing…
CVE-2025-5893 — Critical (CVSS 9.8): Smart Parking Management System from Honding Technology has an Exposure of Sensitive Information vulnerability,…
CVE-2025-27662 — Critical (CVSS 9.8): Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Password in…
CVE-2025-27656 — Critical (CVSS 9.8): Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Password…

Browse all CWE-256 vulnerabilities →