CVE-2017-9864
CVE-2017-9864 is a high-severity vulnerability in Sma Sunny Boy 3600 Firmware with a CVSS 3.x base score of 7.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: High (CVSS 3.x base score 7.5)
- CVSS v2: 5.0
- EPSS exploit prediction: 2% (71st percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Sma Sunny Boy 3600 Firmware
- Published:
- Last modified:
Description
An issue was discovered in SMA Solar Technology products. An attacker can change the plant time even when not authenticated in any way. This changes the system time, possibly affecting lockout policies and random-number generators based on timestamps, and makes timestamps for data analysis unreliable. NOTE: the vendor reports that this is largely irrelevant because it only affects log-entry timestamps, and because the plant time would later be reset via NTP. (It has never been the case that a lockout policy or random-number generator was affected.) Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected
Frequently asked questions
- What is CVE-2017-9864?
- An issue was discovered in SMA Solar Technology products. An attacker can change the plant time even when not authenticated in any way. This changes the system time, possibly affecting lockout policies and random-number generators based on timestamps, and makes timestamps for data analysis unreliable. NOTE: the vendor reports that this is largely irrelevant because it only affects log-entry timestamps, and because the plant time would later be reset via NTP. (It has never been the case that a lockout policy or random-number generator was affected.) Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected
- How severe is CVE-2017-9864?
- CVE-2017-9864 has a CVSS 3.x base score of 7.5, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity high, and availability none.
- Is CVE-2017-9864 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (71st percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2017-9864?
- CVE-2017-9864 primarily affects Sma Sunny Boy 3600 Firmware. In total, 39 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2017-9864?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
- When was CVE-2017-9864 published?
- CVE-2017-9864 was published on 2017-08-05 and last updated on 2026-06-17.
References
- http://www.sma.de/en/statement-on-cyber-security.html
- http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf
- https://horusscenario.com/CVE-information/
Affected products (39)
- cpe:2.3:o:sma:sunny_boy_3600_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sma:sunny_boy_5000_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sma:sunny_tripower_core1_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sma:sunny_tripower_15000tl_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sma:sunny_tripower_20000tl_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sma:sunny_tripower_25000tl_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sma:sunny_tripower_5000tl_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sma:sunny_tripower_12000tl_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sma:sunny_tripower_60_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sma:sunny_boy_3000tl_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sma:sunny_boy_3600tl_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sma:sunny_boy_4000tl_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sma:sunny_boy_5000tl_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sma:sunny_boy_1.5_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sma:sunny_boy_2.5_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sma:sunny_boy_3.0_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sma:sunny_boy_3.6_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sma:sunny_boy_4.0_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sma:sunny_boy_5.0_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sma:sunny_central_2200_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sma:sunny_central_1000cp_xt_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sma:sunny_central_800cp_xt_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sma:sunny_central_850cp_xt_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sma:sunny_central_900cp_xt_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sma:sunny_central_500cp_xt_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sma:sunny_central_630cp_xt_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sma:sunny_central_720cp_xt_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sma:sunny_central_760cp_xt_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sma:sunny_central_storage_500_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sma:sunny_central_storage_630_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sma:sunny_central_storage_720_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sma:sunny_central_storage_760_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sma:sunny_central_storage_800_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sma:sunny_central_storage_850_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sma:sunny_central_storage_900_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sma:sunny_central_storage_1000_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sma:sunny_central_storage_2200_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sma:sunny_central_storage_2500-ev_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:sma:sunny_boy_storage_2.5_firmware:-:*:*:*:*:*:*:*
More vulnerabilities in Sma Sunny Boy 3600 Firmware
- CVE-2017-9861 — Critical (CVSS 9.8): An issue was discovered in SMA Solar Technology products. The SIP implementation does not properly use authentication…
- CVE-2017-9860 — Critical (CVSS 9.8): An issue was discovered in SMA Solar Technology products. An attacker can use Sunny Explorer or the SMAdata2+ network…
- CVE-2017-9859 — Critical (CVSS 9.8): An issue was discovered in SMA Solar Technology products. The inverters make use of a weak hashing algorithm to encrypt…
- CVE-2017-9855 — Critical (CVSS 9.8): An issue was discovered in SMA Solar Technology products. A secondary authentication system is available for Installers…
- CVE-2017-9854 — Critical (CVSS 9.8): An issue was discovered in SMA Solar Technology products. By sniffing for specific packets on the localhost, plaintext…
- CVE-2017-9853 — Critical (CVSS 9.8): An issue was discovered in SMA Solar Technology products. All inverters have a very weak password policy for the user…