Browse CVEs

HIGH 8.8 CVE-2024-1889 Cross-Site Request Forgery vulnerability in SMA Cluster Controller, affecting version 01.05.01.R. This vulnerability could allow an attacker to send … Clcon 10 Firmware Mitigation only Fix from $1,9502024-02-26 MEDIUM 5.4 CVE-2024-1890 Vulnerability whereby an attacker could send a malicious link to an authenticated operator, which could allow remote attackers to perform a clickjack… Sunny Webbox Firmware after 1.61 Fix from $1,6002024-02-26 HIGH 8.1 CVE-2021-46416 Insecure direct object reference in SUNNY TRIPOWER 5.0 Firmware version 3.10.16.R leads to unauthorized user groups accessing due to insecure cookie … Sunny Tripower Firmware No fix yet Fix from $1,9502022-04-07 HIGH 8.8 CVE-2019-13529 An attacker could send a malicious link to an authenticated operator, which may allow remote attackers to perform actions with the permissions of the… Sunny Webbox Firmware after 1.6 Fix from $1,9502019-10-09 CRITICAL 9.8 CVE-2017-9852 An Incorrect Password Management issue was discovered in SMA Solar Technology products. Default passwords exist that are rarely changed. User passwor… Sunny Boy 3600 Firmware Mitigation only Fix from $2,3002017-08-05 CRITICAL 9.8 CVE-2017-9853 An issue was discovered in SMA Solar Technology products. All inverters have a very weak password policy for the user and installer password. No comp… Sunny Boy 3600 Firmware Mitigation only Fix from $2,3002017-08-05 CRITICAL 9.8 CVE-2017-9854 An issue was discovered in SMA Solar Technology products. By sniffing for specific packets on the localhost, plaintext passwords can be obtained as t… Sunny Boy 3600 Firmware Mitigation only Fix from $2,3002017-08-05 CRITICAL 9.8 CVE-2017-9855 An issue was discovered in SMA Solar Technology products. A secondary authentication system is available for Installers called the Grid Guard system.… Sunny Boy 3600 Firmware Mitigation only Fix from $2,3002017-08-05 CRITICAL 9.8 CVE-2017-9859 An issue was discovered in SMA Solar Technology products. The inverters make use of a weak hashing algorithm to encrypt the password for REGISTER req… Sunny Boy 3600 Firmware Mitigation only Fix from $2,3002017-08-05 CRITICAL 9.8 CVE-2017-9860 An issue was discovered in SMA Solar Technology products. An attacker can use Sunny Explorer or the SMAdata2+ network protocol to update the device f… Sunny Boy 3600 Firmware Mitigation only Fix from $2,3002017-08-05 CRITICAL 9.8 CVE-2017-9861 An issue was discovered in SMA Solar Technology products. The SIP implementation does not properly use authentication with encryption: it is vulnerab… Sunny Boy 3600 Firmware Mitigation only Fix from $2,3002017-08-05 HIGH 8.8 CVE-2017-9863 An issue was discovered in SMA Solar Technology products. If a user simultaneously has Sunny Explorer running and visits a malicious host, cross-site… Sunny Boy 3600 Firmware Mitigation only Fix from $1,9502017-08-05 HIGH 8.1 CVE-2017-9857 An issue was discovered in SMA Solar Technology products. The SMAdata2+ communication protocol does not properly use authentication with encryption: … Sunny Boy 3600 Firmware Mitigation only Fix from $1,9502017-08-05 HIGH 7.5 CVE-2017-9851 An issue was discovered in SMA Solar Technology products. By sending nonsense data or setting up a TELNET session to the database port of Sunny Explo… Sunny Explorer Mitigation only Fix from $1,9502017-08-05 HIGH 7.5 CVE-2017-9858 An issue was discovered in SMA Solar Technology products. By sending crafted packets to an inverter and observing the response, active and inactive u… Sunny Boy 3600 Firmware Mitigation only Fix from $1,9502017-08-05 HIGH 7.5 CVE-2017-9862 An issue was discovered in SMA Solar Technology products. When signed into Sunny Explorer with a wrong password, it is possible to create a debug rep… Sunny Explorer Mitigation only Fix from $1,9502017-08-05 HIGH 7.5 CVE-2017-9864 An issue was discovered in SMA Solar Technology products. An attacker can change the plant time even when not authenticated in any way. This changes … Sunny Boy 3600 Firmware Mitigation only Fix from $1,9502017-08-05