From Unauthenticated API to Grid Risk: A Hybrid Inverter Vulnerability Explained
www.saiflow.com
A single misconfigured listening socket on FIMER's React 2 hybrid inverter lets an unauthenticated attacker send commands straight to the Supervisor MCU that governs the device's grid protections.