CVE-2017-9864

An issue was discovered in SMA Solar Technology products. An attacker can change the plant time even when not authenticated in any way. This changes the system time, possibly affecting lockout policies and random-number generators based on timestamps, and makes timestamps for data analysis unreliable. NOTE: the vendor reports that this is largely irrelevant because it only affects log-entry timestamps, and because the plant time would later be reset via NTP. (It has never been the case that a lockout policy or random-number generator was affected.) Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected

• http://www.sma.de/en/statement-on-cyber-security.html
• http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf
• https://horusscenario.com/CVE-information/Third Party Advisory
• http://www.sma.de/en/statement-on-cyber-security.html
• http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf
• https://horusscenario.com/CVE-information/Third Party Advisory

Published

Aug 5, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-9858An issue was discovered in SMA Solar Technology products. By…
• CVE-2017-9859An issue was discovered in SMA Solar Technology products. Th…
• CVE-2017-9860An issue was discovered in SMA Solar Technology products. An…
• CVE-2017-9861An issue was discovered in SMA Solar Technology products. Th…
• CVE-2017-9862An issue was discovered in SMA Solar Technology products. Wh…
• CVE-2017-9863An issue was discovered in SMA Solar Technology products. If…
• CVE-2017-9865The function GfxImageColorMap::getGray in GfxState.cc in Pop…
• CVE-2017-9868In Mosquitto through 1.4.12, mosquitto.db (aka the persisten…
• CVE-2017-9869The II_step_one function in layer2.c in mpglib, as used in l…
• CVE-2017-9870The III_i_stereo function in layer3.c in mpglib, as used in …
• CVE-2017-9871The III_i_stereo function in layer3.c in mpglib, as used in …
• CVE-2017-9872The III_dequantize_sample function in layer3.c in mpglib, as…