CVE-2017-9851

CVE-2017-9851 describes a denial-of-service vulnerability affecting SMA Solar Technology's Sunny Explorer application, specifically impacting Sunny Boy TLST-21, TL-21, Sunny Tripower TL-10, and TL-30 devices. An unauthenticated attacker can crash the application by sending malformed data or initiating a TELNET session to the database port, resulting in a communication failure. With a CVSS score of 7.5 (High), this vulnerability is easily exploitable over the network with low complexity and no user interaction, leading to high availability impact. There is no evidence of active exploitation, and public exploit code (Metasploit, Nuclei, ExploitDB) is unavailable. Despite a single media mention and community discussion, its EPSS score is very low, indicating a minimal likelihood of exploitation.