Sunny Boy TLST-21, TL-21, Sunny Tripower TL-10, TL-30 vulnerabilities
3 known CVE vulnerabilities in Sunny Boy TLST-21, TL-21, Sunny Tripower TL-10, TL-30, translated and rated.
- CVE-2017-9864High
An issue was discovered in SMA Solar Technology products that allows an attacker to change the system time without any authentication. This can affect lockout policies and random-number generators based on timestamps.
- CVE-2017-9862High
An issue was discovered in SMA Solar Technology products that allows the creation of a debug report when signed into Sunny Explorer with a wrong password. This enables an attacker to disclose information regarding the application and save a .txt file with arbitrary content.
- CVE-2017-9858High
An issue was discovered in SMA Solar Technology products that allows determining active and inactive user accounts by sending crafted packets to an inverter and observing the response. This aids in further attacks, such as brute force attacks, as the attacker gains knowledge of existing users.