PT-2015-3055 · Sma Solar · Sma Solar Sunny Webbox

Alexander Timorin · Publicado 2015-09-11 · Atualizado 2016-12-22 · CVE-2015-3964

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SMA Solar Sunny WebBox (affected versions not specified)

Description The issue concerns hardcoded passwords in the SMA Solar Sunny WebBox system, making it easier for remote attackers to gain access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

BDU:2016-00260

CVE-2015-3964

Produtos afetados

Sma Solar Sunny Webbox

Referências · 4

• https://bdu.fstec.ru/vul/2016-00260 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2015-3964 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSA-15-181-02 · Nota
• http://seclists.org/fulldisclosure/2015/Sep/51 · Nota