SMA records
18 published records for vendor sma.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-352 Cross-Site Request Forgery (CSRF)3
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
- CWE-287 Improper Authentication2
- CWE-327 Use of a Broken or Risky Cryptographic Algorithm1
- CWE-521 Weak Password Requirements1
- CWE-639 Authorization Bypass Through User-Controlled Key1
The weakness classes this vendor ships most often: where to look.
CWEAll records
18 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2017-9860No exploit | An issue was discovered in SMA Solar Technology products.sma · sunny boy 3600 firmware · CWE-287 | Critical9.8 | — | 2.2% | Aug 5, 2017 |
40Plan | CVE-2017-9852No exploit | An Incorrect Password Management issue was discovered in SMA Solar Technology products.sma · sunny boy 3600 firmware · CWE-798 | Critical9.8 | — | 1.7% | Aug 5, 2017 |
40Plan | CVE-2017-9853No exploit | An issue was discovered in SMA Solar Technology products.sma · sunny boy 3600 firmware · CWE-521 | Critical9.8 | — | 1.7% | Aug 5, 2017 |
39Monitor | CVE-2017-9855No exploit | An issue was discovered in SMA Solar Technology products.sma · sunny boy 3600 firmware · CWE-863 | Critical9.8 | — | 1.5% | Aug 5, 2017 |
39Monitor | CVE-2017-9861No exploit | An issue was discovered in SMA Solar Technology products.sma · sunny boy 3600 firmware · CWE-74 | Critical9.8 | — | 1.4% | Aug 5, 2017 |
39Monitor | CVE-2017-9859No exploit | An issue was discovered in SMA Solar Technology products.sma · sunny boy 3600 firmware · CWE-327 | Critical9.8 | — | 1.1% | Aug 5, 2017 |
39Monitor | CVE-2017-9854No exploit | An issue was discovered in SMA Solar Technology products.sma · sunny boy 3600 firmware · CWE-311 | Critical9.8 | — | 1.1% | Aug 5, 2017 |
36Monitor | CVE-2019-13529Proof of concept | An attacker could send a malicious link to an authenticated operator, which may allow remote attackers to perform actions with the permissiosma · sunny webbox firmware · CWE-352 | High8.8 | — | 3.1% | Oct 9, 2019 |
35Monitor | CVE-2017-9863No exploit | An issue was discovered in SMA Solar Technology products.sma · sunny boy 3600 firmware · CWE-352 | High8.8 | — | 0.6% | Aug 5, 2017 |
35Monitor | CVE-2024-1889No exploit | Cross-Site Request Forgery vulnerability in SMA Cluster Controllersma · clcon-10 firmware · CWE-352 | High8.8 | — | 0.3% | Feb 26, 2024 |
33Monitor | CVE-2021-46416Proof of concept | Insecure direct object reference in SUNNY TRIPOWER 5.0 Firmware version 3.10.16.R leads to unauthorized user groups accessing due to insecursma · sunny tripower firmware · CWE-639 | High8.1 | — | 4.2% | Apr 7, 2022 |
32Monitor | CVE-2017-9857No exploit | An issue was discovered in SMA Solar Technology products.sma · sunny boy 3600 firmware · CWE-287 | High8.1 | — | 0.6% | Aug 5, 2017 |
31Monitor | CVE-2017-9858No exploit | An issue was discovered in SMA Solar Technology products.sma · sunny boy 3600 firmware · CWE-200 | High7.5 | — | 2.0% | Aug 5, 2017 |
31Monitor | CVE-2017-9851No exploit | An issue was discovered in SMA Solar Technology products.sma · sunny explorer | High7.5 | — | 1.8% | Aug 5, 2017 |
31Monitor | CVE-2017-9862No exploit | An issue was discovered in SMA Solar Technology products.sma · sunny explorer · CWE-200 | High7.5 | — | 1.7% | Aug 5, 2017 |
30Monitor | CVE-2017-9864No exploit | An issue was discovered in SMA Solar Technology products.sma · sunny boy 3600 firmware | High7.5 | — | 1.5% | Aug 5, 2017 |
21Monitor | CVE-2024-1890No exploit | Clickjacking vulnerability in Sunny Webboxsma · sunny webbox firmware · CWE-1021 | Medium5.4 | — | 0.4% | Feb 26, 2024 |
13Monitor | CVE-2017-9856No exploit | An issue was discovered in SMA Solar Technology products.sma · sunny boy 3600 firmware · CWE-256 | Low3.4 | — | 0.6% | Aug 5, 2017 |
- CVE-2017-986040Plan
An issue was discovered in SMA Solar Technology products.
CriticalCVSS 9.8No exploitEPSS 2%sma · sunny boy 3600 firmwareAug 5, 2017
- CVE-2017-985240Plan
An Incorrect Password Management issue was discovered in SMA Solar Technology products.
CriticalCVSS 9.8No exploitEPSS 1%sma · sunny boy 3600 firmwareAug 5, 2017
- CVE-2017-985340Plan
An issue was discovered in SMA Solar Technology products.
CriticalCVSS 9.8No exploitEPSS 1%sma · sunny boy 3600 firmwareAug 5, 2017
- CVE-2017-985539Monitor
An issue was discovered in SMA Solar Technology products.
CriticalCVSS 9.8No exploitEPSS 1%sma · sunny boy 3600 firmwareAug 5, 2017
- CVE-2017-986139Monitor
An issue was discovered in SMA Solar Technology products.
CriticalCVSS 9.8No exploitEPSS 1%sma · sunny boy 3600 firmwareAug 5, 2017
- CVE-2017-985939Monitor
An issue was discovered in SMA Solar Technology products.
CriticalCVSS 9.8No exploitEPSS 1%sma · sunny boy 3600 firmwareAug 5, 2017
- CVE-2017-985439Monitor
An issue was discovered in SMA Solar Technology products.
CriticalCVSS 9.8No exploitEPSS 1%sma · sunny boy 3600 firmwareAug 5, 2017
- CVE-2019-1352936Monitor
An attacker could send a malicious link to an authenticated operator, which may allow remote attackers to perform actions with the permissio
HighCVSS 8.8Proof of conceptEPSS 3%sma · sunny webbox firmwareOct 9, 2019
- CVE-2017-986335Monitor
An issue was discovered in SMA Solar Technology products.
HighCVSS 8.8No exploitEPSS 0%sma · sunny boy 3600 firmwareAug 5, 2017
- CVE-2024-188935Monitor
Cross-Site Request Forgery vulnerability in SMA Cluster Controller
HighCVSS 8.8No exploitEPSS 0%sma · clcon-10 firmwareFeb 26, 2024
- CVE-2021-4641633Monitor
Insecure direct object reference in SUNNY TRIPOWER 5.0 Firmware version 3.10.16.R leads to unauthorized user groups accessing due to insecur
HighCVSS 8.1Proof of conceptEPSS 4%sma · sunny tripower firmwareApr 7, 2022
- CVE-2017-985732Monitor
An issue was discovered in SMA Solar Technology products.
HighCVSS 8.1No exploitEPSS 0%sma · sunny boy 3600 firmwareAug 5, 2017
- CVE-2017-985831Monitor
An issue was discovered in SMA Solar Technology products.
HighCVSS 7.5No exploitEPSS 2%sma · sunny boy 3600 firmwareAug 5, 2017
- CVE-2017-985131Monitor
An issue was discovered in SMA Solar Technology products.
HighCVSS 7.5No exploitEPSS 1%sma · sunny explorerAug 5, 2017
- CVE-2017-986231Monitor
An issue was discovered in SMA Solar Technology products.
HighCVSS 7.5No exploitEPSS 1%sma · sunny explorerAug 5, 2017
- CVE-2017-986430Monitor
An issue was discovered in SMA Solar Technology products.
HighCVSS 7.5No exploitEPSS 1%sma · sunny boy 3600 firmwareAug 5, 2017
- CVE-2024-189021Monitor
Clickjacking vulnerability in Sunny Webbox
MediumCVSS 5.4No exploitEPSS 0%sma · sunny webbox firmwareFeb 26, 2024
- CVE-2017-985613Monitor
An issue was discovered in SMA Solar Technology products.
LowCVSS 3.4No exploitEPSS 0%sma · sunny boy 3600 firmwareAug 5, 2017