Sma vulnerabilities

Products

• Sunny Boy 1.5 Firmware 12
• Sunny Boy 2.5 Firmware 12
• Sunny Boy 3000tl Firmware 12
• Sunny Boy 3.0 Firmware 12
• Sunny Boy 3600 Firmware 12
• Sunny Boy 3600tl Firmware 12
• Sunny Boy 3.6 Firmware 12
• Sunny Boy 4000tl Firmware 12
• Sunny Boy 4.0 Firmware 12
• Sunny Boy 5000 Firmware 12
• Sunny Boy 5000tl Firmware 12
• Sunny Boy 5.0 Firmware 12
• Sunny Boy Storage 2.5 Firmware 12
• Sunny Central 1000cp Xt Firmware 12
• Sunny Central 2200 Firmware 12
• Sunny Central 500cp Xt Firmware 12
• Sunny Central 630cp Xt Firmware 12
• Sunny Central 720cp Xt Firmware 12
• Sunny Central 760cp Xt Firmware 12
• Sunny Central 800cp Xt Firmware 12
• Sunny Central 850cp Xt Firmware 12
• Sunny Central 900cp Xt Firmware 12
• Sunny Central Storage 1000 Firmware 12
• Sunny Central Storage 2200 Firmware 12
• Sunny Central Storage 2500-ev Firmware 12
• Sunny Central Storage 500 Firmware 12
• Sunny Central Storage 630 Firmware 12
• Sunny Central Storage 720 Firmware 12
• Sunny Central Storage 760 Firmware 12
• Sunny Central Storage 800 Firmware 12
• Sunny Central Storage 850 Firmware 12
• Sunny Central Storage 900 Firmware 12
• Sunny Tripower 12000tl Firmware 12
• Sunny Tripower 15000tl Firmware 12
• Sunny Tripower 20000tl Firmware 12
• Sunny Tripower 25000tl Firmware 12
• Sunny Tripower 5000tl Firmware 12
• Sunny Tripower 60 Firmware 12
• Sunny Tripower Core1 Firmware 12
• Sunny Explorer 3
• Sunny Webbox 2
• Sunny Webbox Firmware 2
• Www.sunnyportal.com 2

Newest

• sma boy 3.0, boy 3.6, boy 4.0 +2 more +4 more SMA: Directory Traversal in Sunny Boy <3.10.27.R CVE-2021-4459 6.5 MediumAugust 27, 2025
• sma ennexos.sunnyportal.com SMA: Sunny Portal limited disclosure of personal data of registered users to an authenticated user CVE-2025-41685 6.5 MediumAugust 19, 2025
• sma www.sunnyportal.com SMA: Sunny Portal demo system privilege escalation CVE-2025-41645 8.6 HighMay 13, 2025
• sma www.sunnyportal.com SMA: Sunny Portal Remote Code Execution CVE-2025-0731 6.5 MediumFebruary 26, 2025
• sma sunny central sc 1760-us, sunny central sc 1850-us, sunny central sc 2000 ev-us +53 more +55 more SMA: SQL injection in Sunny Central UP CVE-2024-11025 5.4 MediumNovember 27, 2024
• sma sunny webbox, sunny webbox firmware +1 more Clickjacking vulnerability in Sunny Webbox CVE-2024-1890 6.4 MediumFebruary 26, 2024
• sma cluster controller, clcon-10 firmware, clcon-s-10 firmware +2 more Cross-Site Request Forgery vulnerability in SMA Cluster Controller CVE-2024-1889 8.8 HighFebruary 26, 2024
• sma sunny tripower firmware Insecure direct object reference in SUNNY TRIPOWER 5.0 Firmware version 3.10.16.R leads to... CVE-2021-46416 Public exploit 8.1 HighApril 7, 2022
• sma sunny webbox, sunny webbox firmware +1 more An attacker could send a malicious link to an authenticated operator, which may allow remote... CVE-2019-13529 Public exploit 8.8 HighOctober 9, 2019
• sma sunny boy 1.5 firmware, sunny boy 2.5 firmware, sunny boy 3.0 firmware +36 more +38 more ** DISPUTED ** An issue was discovered in SMA Solar Technology products. An attacker can change... CVE-2017-9864 Disputed 7.5 HighAugust 5, 2017
• sma sunny explorer, sunny boy 1.5 firmware, sunny boy 2.5 firmware +37 more +39 more ** DISPUTED ** An issue was discovered in SMA Solar Technology products. If a user simultaneously... CVE-2017-9863 Disputed 8.8 HighAugust 5, 2017
• sma sunny explorer ** DISPUTED ** An issue was discovered in SMA Solar Technology products. When signed into Sunny... CVE-2017-9862 Disputed 7.5 HighAugust 5, 2017
• sma sunny boy 1.5 firmware, sunny boy 2.5 firmware, sunny boy 3.0 firmware +36 more +38 more ** DISPUTED ** An issue was discovered in SMA Solar Technology products. The SIP implementation... CVE-2017-9861 Disputed 9.8 CriticalAugust 5, 2017
• sma sunny boy 1.5 firmware, sunny boy 2.5 firmware, sunny boy 3.0 firmware +36 more +38 more ** DISPUTED ** An issue was discovered in SMA Solar Technology products. An attacker can use... CVE-2017-9860 Disputed 9.8 CriticalAugust 5, 2017
• sma sunny boy 1.5 firmware, sunny boy 2.5 firmware, sunny boy 3.0 firmware +36 more +38 more ** DISPUTED ** An issue was discovered in SMA Solar Technology products. The inverters make use... CVE-2017-9859 Disputed 9.8 CriticalAugust 5, 2017
• sma sunny boy 1.5 firmware, sunny boy 2.5 firmware, sunny boy 3.0 firmware +36 more +38 more ** DISPUTED ** An issue was discovered in SMA Solar Technology products. By sending crafted... CVE-2017-9858 Disputed 7.5 HighAugust 5, 2017
• sma sunny tripower, sunny boy 1.5, sunny boy 1.5 firmware +38 more +40 more ** DISPUTED ** An issue was discovered in SMA Solar Technology products. The SMAdata2+... CVE-2017-9857 Disputed 8.1 HighAugust 5, 2017
• sma sunny boy tlst-21, sunny tripower tl-10, sunny boy 1.5 firmware +40 more +42 more ** DISPUTED ** An issue was discovered in SMA Solar Technology products. Sniffed passwords from... CVE-2017-9856 Disputed 9.8 CriticalAugust 5, 2017
• sma sunny boy 1.5 firmware, sunny boy 2.5 firmware, sunny boy 3.0 firmware +36 more +38 more ** DISPUTED ** An issue was discovered in SMA Solar Technology products. A secondary... CVE-2017-9855 Disputed 9.8 CriticalAugust 5, 2017
• sma sunny boy 1.5 firmware, sunny boy 2.5 firmware, sunny boy 3.0 firmware +36 more +38 more ** DISPUTED ** An issue was discovered in SMA Solar Technology products. By sniffing for specific... CVE-2017-9854 Disputed 9.8 CriticalAugust 5, 2017
• sma sunny boy 1.5 firmware, sunny boy 2.5 firmware, sunny boy 3.0 firmware +36 more +38 more ** DISPUTED ** An issue was discovered in SMA Solar Technology products. All inverters have a... CVE-2017-9853 Disputed 9.8 CriticalAugust 5, 2017
• sma sunny boy 1.5 firmware, sunny boy 2.5 firmware, sunny boy 3.0 firmware +36 more +38 more ** DISPUTED ** An Incorrect Password Management issue was discovered in SMA Solar Technology... CVE-2017-9852 Disputed 9.8 CriticalAugust 5, 2017
• sma sunny explorer ** DISPUTED ** An issue was discovered in SMA Solar Technology products. By sending nonsense data... CVE-2017-9851 Disputed 7.5 HighAugust 5, 2017