Description
When connecting to the Solax Cloud MQTT server the username is the "registration number", which is the 10 character string printed on the SolaX Power Pocket device / the QR code on the device. The password is derived from the "registration number" using a proprietary XOR/transposition algorithm. Attackers with the knowledge of the registration numbers can connect to the MQTT server and impersonate the dongle / inverters.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
SolaX Power Pocket WiFi 3.0
Default version status: unaffected
<3.022.03affected
SolaX Power Pocket WiFi+LAN
Default version status: unaffected
<1.009.02affected
SolaX Power Pocket WiFi+4GM
Default version status: unaffected
<1.005.05affected
SolaX Power Pocket WiFi+LAN 2.0
Default version status: unaffected
<006.06affected
SolaX Power Pocket WiFi 4.0
Default version status: unaffected
<003.03affected