Solar panel inverters easy to hack, study shows

Aug 17, 2023

Digital - Research by the National Digital Infrastructure Inspectorate (RDI) shows that many solar panel inverters are not compliant.

Research by the National Digital Infrastructure Inspectorate (RDI) shows that many solar panel inverters do not meet requirements. As a result, they can cause interference to other wireless devices, or be hacked, RDI says in a (Dutch) press release.

Using solar energy is good for the climate. Therefore, the number of solar panel installations in the Netherlands is increasing rapidly. RDI launched an investigation in 2021 to see if solar panel installation inverters meet legal requirements. That investigation focused on both the possibility of them causing interference to other applications and cyber security. Nine inverters were examined for that purpose.

The study shows that none of the inverters examined meet all the requirements. Five of the nine inverters were found to be capable of causing interference. Everyday applications, such as radio or wireless tags to open doors, could be affected and possibly function less well or not at all. Even aviation and shipping may be affected.

One-time donationMonthlyEach quarterAnnually

Name

Email address

Currency*AEDAUDBGNCADCHFCZKDKKEUR (€)GBP (£)HKDHRKHUFILSISKJPY (¥)NOKNZDPHPPLNRONRUBSEKSGDUSD (US$)ZARAmount () *

function dmm_recurring_methods(value) { var x = document.getElementsByClassName("dmm_recurring"); var i; for (i = 0; i function dmm_multicurrency_methods(value) { let dmm_currencies = {"AED":"AED","AUD":"AUD","BGN":"BGN","CAD":"CAD","CHF":"CHF","CZK":"CZK","DKK":"DKK","EUR":"€","GBP":"£","HKD":"HKD","HRK":"HRK","HUF":"HUF","ILS":"ILS","ISK":"ISK","JPY":"¥","NOK":"NOK","NZD":"NZD","PHP":"PHP","PLN":"PLN","RON":"RON","RUB":"RUB","SEK":"SEK","SGD":"SGD","USD":"US$","ZAR":"ZAR"}; document.getElementById("dmm_currency_symbol").innerHTML = dmm_currencies[value]; let x = document.getElementsByClassName("dmm_nomc"); for (let i = 0; i == Choose a payment method ==iDEALCardPayPal

I hereby agree to the Privacy Policy

The cybersecurity results showed an even more disappointing picture: none of the nine inverters examined is up to standard. This makes them easy to hack, remotely disable or use for DDoS attacks. Personal and usage data can also be stolen via the inverters.

Of the inverters examined, none complied with administrative requirements. These require, among other things, that a manual be included so that consumers can use the product correctly. The manufacturer must also make its address information available so consumers can contact it if they have questions or problems.

Manufacturers of products that can cause disruption are required by law to take appropriate measures immediately to prevent them from marketing any more disruptive products.

The RDI advises manufacturers of products with substandard cyber security to modify their products. The cybersecurity requirements will not be active until Aug. 1, 2024. These research results will help them improve their products so that they do meet the requirements from that date.

The RDI recommends purchasing an inverter that has a CE mark on it. An inverter without CE marking does not meet the requirements. It is important to pay close attention to this when purchasing. The RDI also recommends being alert to malfunctions and reporting them to the supplier.

To increase cyber security, the RDI recommends, among other things, securing inverters with strong passwords and regular updates.