Jump to content

New remote control feature on Solarman Smart


Recommended Posts

Happened to notice a new feature on Solarman Smart, a button termed “Remote Control “ , I can now remotely change all settings from my phone, tried smart load and system mode, works great, anyone else notice it

Link to post
Share on other sites
42 minutes ago, pete boy said:

Can you elaborate?

The Solarman app (and its web-based equivalent pro.solarman.cn) is a public interface, the config of your Sunsynk is literally protected by a userid and password. This is considered pretty weak authentication, humans can choose weak passwords and / or re-use passwords across various sites, take a look at https://haveibeenpwned.com. There is 2SV on registration but not on subsequent authentication.

This means that an attacker who discovers your password in a previous data breach, or who successfully guesses your password, can alter the config of your inverter. 

Firstly, when adding this kind of functionality, Solarman should rather make it opt-in, givng the user the choice in taking the risk. Secondly, 2FA should be mandatory for any config changes coming from a publicly available interface.

 

 

Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...