CVE-2017-9860

Name of the Vulnerable Software and Affected Versions SMA Solar Technology products, specifically Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30

Description An issue allows an attacker to update device firmware without authentication using Sunny Explorer or the SMAdata2+ network protocol. If a custom firmware version is accepted by the inverter, it can be completely compromised, potentially allowing access to the local OS, creation of a botnet, or use as a stepping stone into companies. The vendor reports that a final integrity and compatibility check has always blocked this attack.

Recommendations For Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30, consider restricting access to the SMAdata2+ network protocol and Sunny Explorer until a fix is available. As a temporary workaround, consider implementing additional authentication measures for firmware updates until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.