SolaX Cloud Device Takeover Vulnerability
Vulnerability
A vulnerability in the SolaX Cloud platform allows unauthorized access to any SolaX solar panel inverter, provided the serial number is known. This issue arises from missing authorization, enabling the takeover of the inverter remotely.
Impact
Exploitation of this vulnerability allows for unauthorized takeover of SolaX solar panel inverters, with potential high impact on subsequent systems.
Remediation
SolaX has released a patch for this vulnerability in SolaX Cloud version 6.9. Users should update to this version.
Added: Sep 10, 2025, 9:20 AM
Updated: Sep 10, 2025, 9:20 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
7.5exploitability
4.8remediation
0.0relevance
0.5threat
0.0urgency
2.9incentive
0.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.