What is CVE-2017-9852?

CVE-2017-9852 is a critical-severity vulnerability in Sma Sunny_boy_1.5, classified under Use of Hard-coded Credentials. CVSS score: 9.8/10. Published 2017-08-05.

How severe is CVE-2017-9852?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in Sma Sunny_boy_1.5

CVE-2017-9852

An Incorrect Password Management issue was discovered in SMA Solar Technology products. Default passwords exist that are rarely changed. User passwords will almost always be default. Installer passwords are expected to be default or simila…

EPSS: 0.017 (74.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Sma Sunny_boy_1.5
Sma Sunny_boy_1.5_firmware
Sma Sunny_boy_2.5
Sma Sunny_boy_2.5_firmware
Sma Sunny_boy_3.0
Sma Sunny_boy_3000tl
Sma Sunny_boy_3000tl_firmware
Sma Sunny_boy_3.0_firmware
Sma Sunny_boy_3.6
Sma Sunny_boy_3600

Weakness classification (CWE)

CWE-798 — Use of Hard-coded Credentials

References

cve@mitre.org (x_refsource_MISC)
cve@mitre.org (Third Party Advisory, x_refsource_MISC)
cve@mitre.org (x_refsource_MISC)

Frequently asked questions

What is CVE-2017-9852?: CVE-2017-9852 is a critical-severity vulnerability in Sma Sunny_boy_1.5, classified under Use of Hard-coded Credentials. CVSS score: 9.8/10. Published 2017-08-05.
How severe is CVE-2017-9852?: Critical severity. CVSS v3 base score is 9.8 out of 10.