Vulnerability index

Browse CVEs

15 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Clcon 10 Firmware HIGH 8.8
CVE-2024-1889

Cross-Site Request Forgery vulnerability in SMA Cluster Controller, affecting version 01.05.01.R. This vulnerability could allow an attacker to send …

Mitigation only
Fix from $1,950 2024-02-26
Sunny Tripower Firmware HIGH 8.1
CVE-2021-46416

Insecure direct object reference in SUNNY TRIPOWER 5.0 Firmware version 3.10.16.R leads to unauthorized user groups accessing due to insecure cookie …

No fix yet
Fix from $1,950 2022-04-07
Sunny Boy 3600 Firmware CRITICAL 9.8
CVE-2017-9852

An Incorrect Password Management issue was discovered in SMA Solar Technology products. Default passwords exist that are rarely changed. User passwor…

Mitigation only
Fix from $2,300 2017-08-05
Sunny Boy 3600 Firmware CRITICAL 9.8
CVE-2017-9853

An issue was discovered in SMA Solar Technology products. All inverters have a very weak password policy for the user and installer password. No comp…

Mitigation only
Fix from $2,300 2017-08-05
Sunny Boy 3600 Firmware CRITICAL 9.8
CVE-2017-9854

An issue was discovered in SMA Solar Technology products. By sniffing for specific packets on the localhost, plaintext passwords can be obtained as t…

Mitigation only
Fix from $2,300 2017-08-05
Sunny Boy 3600 Firmware CRITICAL 9.8
CVE-2017-9855

An issue was discovered in SMA Solar Technology products. A secondary authentication system is available for Installers called the Grid Guard system.…

Mitigation only
Fix from $2,300 2017-08-05
Sunny Boy 3600 Firmware CRITICAL 9.8
CVE-2017-9859

An issue was discovered in SMA Solar Technology products. The inverters make use of a weak hashing algorithm to encrypt the password for REGISTER req…

Mitigation only
Fix from $2,300 2017-08-05
Sunny Boy 3600 Firmware CRITICAL 9.8
CVE-2017-9860

An issue was discovered in SMA Solar Technology products. An attacker can use Sunny Explorer or the SMAdata2+ network protocol to update the device f…

Mitigation only
Fix from $2,300 2017-08-05
Sunny Boy 3600 Firmware CRITICAL 9.8
CVE-2017-9861

An issue was discovered in SMA Solar Technology products. The SIP implementation does not properly use authentication with encryption: it is vulnerab…

Mitigation only
Fix from $2,300 2017-08-05
Sunny Boy 3600 Firmware HIGH 8.8
CVE-2017-9863

An issue was discovered in SMA Solar Technology products. If a user simultaneously has Sunny Explorer running and visits a malicious host, cross-site…

Mitigation only
Fix from $1,950 2017-08-05
Sunny Boy 3600 Firmware HIGH 8.1
CVE-2017-9857

An issue was discovered in SMA Solar Technology products. The SMAdata2+ communication protocol does not properly use authentication with encryption: …

Mitigation only
Fix from $1,950 2017-08-05
Sunny Explorer HIGH 7.5
CVE-2017-9851

An issue was discovered in SMA Solar Technology products. By sending nonsense data or setting up a TELNET session to the database port of Sunny Explo…

Mitigation only
Fix from $1,950 2017-08-05
Sunny Boy 3600 Firmware HIGH 7.5
CVE-2017-9858

An issue was discovered in SMA Solar Technology products. By sending crafted packets to an inverter and observing the response, active and inactive u…

Mitigation only
Fix from $1,950 2017-08-05
Sunny Explorer HIGH 7.5
CVE-2017-9862

An issue was discovered in SMA Solar Technology products. When signed into Sunny Explorer with a wrong password, it is possible to create a debug rep…

Mitigation only
Fix from $1,950 2017-08-05
Sunny Boy 3600 Firmware HIGH 7.5
CVE-2017-9864

An issue was discovered in SMA Solar Technology products. An attacker can change the plant time even when not authenticated in any way. This changes …

Mitigation only
Fix from $1,950 2017-08-05