CVE-2017-9856

CVE-2017-9856 describes a critical vulnerability in specific SMA Solar Technology products, including Sunny Boy TLST-21, TL-21, Sunny Tripower TL-10, and TL-30. The vulnerability allows attackers to easily decrypt sniffed passwords from SMAdata2+ communication due to a very simple encryption algorithm, enabling unauthorized device authentication. With a CVSS score of 9.8 (Critical), this vulnerability has a network-based attack vector with low complexity, posing a high risk to confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, indicating awareness and potential interest from threat actors.