1.21 Gigawatts: Vulnerabilities in Solar Panels
Waylon Grange analyzes the security posture of smart solar power inverters, demonstrating hardware probing, firmware extraction, and remote takeover vectors.
Summary
The Expanding Footprint of Connected Solar Infrastructure
As renewable energy adoption accelerates, smart photovoltaic solar inverters with IoT cloud connectivity are deployed across residential rooftops and commercial solar farms.
Hardware Teardown and Debug Port Interrogation
Waylon Grange inspects leading solar inverter hardware, tapping UART serial headers and SPI flash chips to extract underlying embedded Linux firmware.
Uncovering Critical Inverter Vulnerabilities
Auditing proprietary monitoring protocols and firmware binaries reveals unauthenticated debug daemons, hardcoded credentials, and cloud API authorization flaws.
Mitigating Systemic Grid Disruption Risks
The author explores how mass remote shutdown of distributed solar inverters could destabilize the electrical grid, proposing firmware hardening and network isolation controls.
Related talks
Main Stage·33 min
Anthony Rose · Jake Krasnov
Uncovers widespread firmware backdoors and hardware vulnerabilities in commercial solar inverters and energy management gateways across global supply chains.
ICS Village·22 min
Hash Saehi
Hash Saehi dissects the hardware and RF protocols of electrical smart meters, demonstrating why auditing grid edge devices is vital for infrastructure resilience.
Wireless Village·33 min
Travis Goodspeed
Travis Goodspeed provides an update on the Goodwatch open-source wrist-worn RF radio hacking and packet manipulation platform.