CONNECT WITH US
Climate & Energy

Climate & Energy

Sungrow patches iSolarCloud vulnerability after security researchers gain access

pv magazine Global logo

Published on

Add as a preferred source on Google
Sungrow patches iSolarCloud vulnerability after security researchers gain access

Sungrow has patched a vulnerability in its iSolarCloud platform that allowed access to platform accounts without the required authentication, following research by German cybersecurity company Jakkaru.

The vulnerability was reported to Sungrow on Aug. 22 by an independent security researcher working with Jakkaru. Sungrow said it reproduced the attack and deployed an emergency patch across all iSolarCloud levels on Aug. 25, with the underlying cause fully resolved the same day.

Jakkaru Managing Director Marlon Starkloff confirmed that Sungrow responded promptly after being notified of the vulnerability. He said the flaw affected the company’s cloud infrastructure rather than a specific inverter model or product series, potentially exposing all inverters connected to iSolarCloud.

Jakkaru conducted the investigation as an independent research project and not on behalf of another company. The cybersecurity firm also works with PV companies on security testing and penetration tests, although Starkloff said most of its customers cannot be identified publicly. Its disclosed customers include Fox ESS, while the company has also investigated inverters from APsystems.

Jakkaru said it regularly examines inverter manufacturers, including large suppliers such as Sungrow, Huawei and SMA. Starkloff said the company selected Sungrow for closer investigation partly because it is one of the world’s largest inverter manufacturers.

A follow-up test by Jakkaru in mid-September confirmed that the vulnerability could no longer be reproduced, according to Sungrow.

Sungrow also said an examination of platform logs covering the period during which the vulnerability existed found no evidence that anyone other than the reporting researcher had exploited it.


Source link
Related Topics:Climate & Energy

Disclaimer

We strive to uphold the highest ethical standards in all of our reporting and coverage. We TheMorningPulse.fyi want to be transparent with our readers about any potential conflicts of interest that may arise in our work. It's possible that some of the investors we feature may have connections to other businesses, including competitors or companies we write about. However, we want to assure our readers that this will not have any impact on the integrity or impartiality of our reporting. We are committed to delivering accurate, unbiased news and information to our audience, and we will continue to uphold our ethics and principles in all of our work. Thank you for your trust and support.