EG4 Electronics EG4 Inverters Improper Restriction of Excessive Authentication Attempts Vulnerability

A vulnerability exists in EG4 Electronics EG4 Inverters due to the lack of restrictions on the number of attempts to enter a correct PIN for registered products. This flaw could enable an attacker to use brute-force methods to gain unauthorized access, provided they have a valid device serial number. The API offers clear feedback when the correct PIN is entered. This vulnerability was addressed in a server-side update on April 6, 2025.

Impact

Exploitation of this vulnerability could allow unauthorized access to the affected inverter, potentially leading to unauthorized control over the device and its functions.