GoodWe GW1500-XS Hard-Coded Credentials Vulnerability Allowing Unauthorized Web Interface Access

A vulnerability exists in the GoodWe GW1500-XS inverter, specifically in version 1.1.2.1, due to hard-coded credentials in the Wi-Fi BOX. This flaw allows anyone in physical proximity to the device to access the inverter's web interface over Wi-Fi. Through this interface, an individual could modify the inverter's network settings or restart the device.

Impact

Exploitation of this vulnerability could lead to unauthorized access to the inverter's web interface, allowing for changes to the device's network configuration or a restart of the inverter.