Papendorf SOL Connect Center Missing Authentication Vulnerability in Web Interface

A vulnerability exists in Papendorf SOL Connect Center version 3.3.0.0, specifically within the Web Interface component. This vulnerability is characterized by missing authentication, allowing unauthenticated attackers to remotely access sensitive operational data from the photovoltaic monitoring system. The issue arises from inadequate authentication and authorization controls, enabling access to real-time and historical power generation data, as well as the operational status of individual inverters.

Impact

Exploitation of this vulnerability allows unauthorized users to retrieve sensitive data from the PV monitoring system, including detailed power generation statistics and the operational status of inverters, which can reveal performance metrics and potential faults.

Remediation

It is recommended to implement firewall rules to restrict access to the vulnerable web interface.