CVE-2017-9854

CVE-2017-9854 describes a critical vulnerability in SMA Solar Technology products, specifically Sunny Boy TLST-21, TL-21, Sunny Tripower TL-10, and TL-30. An attacker on the localhost can sniff network traffic to capture plaintext passwords entered by users into Sunny Explorer, leading to device compromise. This vulnerability carries a CVSS score of 9.8 (Critical) due to its network attack vector, low complexity, and high impact on confidentiality, integrity, and availability. While the vendor notes low exploitation likelihood as these packets are typically sent only during installation, there is no public exploit code available, and it is not listed on the KEV catalog. However, it has garnered significant community discussion and media coverage, indicating awareness despite the lack of active exploitation.