CVE-2017-9855

An issue was discovered in SMA Solar Technology products. A secondary authentication system is available for Installers called the Grid Guard system. This system uses predictable codes, and a single Grid Guard code can be used on any SMA inverter. Any such code, when combined with the installer account, allows changing very sensitive parameters. NOTE: the vendor reports that Grid Guard is not an authentication feature; it is only a tracing feature. Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected

• CWE-863

• http://www.sma.de/en/statement-on-cyber-security.html
• http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf
• https://horusscenario.com/CVE-information/Third Party Advisory
• http://www.sma.de/en/statement-on-cyber-security.html
• http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf
• https://horusscenario.com/CVE-information/Third Party Advisory

Published

Aug 5, 2017

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-9847The bdecode function in bdecode.cpp in libtorrent 1.1.3 allo…
• CVE-2017-9848SQL injection vulnerability in C_InfoService.asmx in WebServ…
• CVE-2017-9851An issue was discovered in SMA Solar Technology products. By…
• CVE-2017-9852An Incorrect Password Management issue was discovered in SMA…
• CVE-2017-9853An issue was discovered in SMA Solar Technology products. Al…
• CVE-2017-9854An issue was discovered in SMA Solar Technology products. By…
• CVE-2017-9856An issue was discovered in SMA Solar Technology products. Sn…3.4
• CVE-2017-9857An issue was discovered in SMA Solar Technology products. Th…
• CVE-2017-9858An issue was discovered in SMA Solar Technology products. By…
• CVE-2017-9859An issue was discovered in SMA Solar Technology products. Th…
• CVE-2017-9860An issue was discovered in SMA Solar Technology products. An…
• CVE-2017-9861An issue was discovered in SMA Solar Technology products. Th…