PT-2015-3055 · Sma Solar · Sma Solar Sunny Webbox

Alexander Timorin · Published 2015-09-11 · Updated 2016-12-22 · CVE-2015-3964

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SMA Solar Sunny WebBox (affected versions not specified)

Description The issue concerns hardcoded passwords in the SMA Solar Sunny WebBox system, making it easier for remote attackers to gain access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

BDU:2016-00260

CVE-2015-3964

Affected Products

Sma Solar Sunny Webbox

References · 4

• https://bdu.fstec.ru/vul/2016-00260 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-3964 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSA-15-181-02 · Note
• http://seclists.org/fulldisclosure/2015/Sep/51 · Note