Researchers Uncover Vulnerabilities in Solarman and Deye Solar Systems

August 12, 2024 at 07:12AM Cybersecurity researchers discovered vulnerabilities in photovoltaic system management platforms by Chinese companies Solarman and Deye, posing a risk of power blackouts if exploited. The shortcomings, including account takeover and information leaks, have been addressed as of July 2024. The vulnerabilities could allow attackers to take over accounts, control inverters, and … Read more

Solar Power Installations Worldwide Open to Cloud API Bugs

August 9, 2024 at 02:48PM An analysis of Solarman and Deye Cloud for managing solar power installations uncovered vulnerabilities in their cloud APIs. Bitdefender researchers found that unauthorized parties could alter inverter settings and access personally identifiable information via these APIs. Potential consequences include destabilizing the power grid and compromising a significant amount of solar … Read more

Vulnerabilities Exposed Widely Used Solar Power Systems to Hacking, Disruption

August 8, 2024 at 09:18AM Bitdefender researchers found critical vulnerabilities in widely used Solarman and Deye solar power systems, potentially enabling attackers to cause disruption and blackouts. The flaws allowed attackers to take control of accounts, manipulate inverters, and access sensitive data. Bitdefender reported the findings and patches were deployed in the summer. Robust cybersecurity … Read more