Rebadged, Relabeled, Rooted: Pwnage via Solar Supply Chain

Anthony Rose, Jake Krasnov

DEF CON 33 · Day 1 · Main Stage

Solar energy infrastructure is expanding rapidly across residential, commercial, and utility scales — but its supply chain is riddled with security problems that most buyers never think to ask about.

AI review

Solar supply chain rebadging creates a single OEM firmware vulnerability that propagates across dozens of brands — unauthenticated RCE, hardcoded creds, no-signature OTA updates, and Shodan says thousands are internet-exposed right now.

Watch on YouTube