SolaX

SolaX

Basic information
Founded	2012
Legal Structure	Public
Industry	Solar Inverters Manufacturer, Renewable energy
Official website	https://www.solaxpower.com/

SolaX is a Chinese PV Inverters & energy storage manufacturer based in Hangzhou, China.

It's current products include single- and three-phase PV inverters, batteries and EV Chargers and various accessories.

Consumer-impact summary

Since SolaX is operating their own cloud service (at least at time of writing no subscription required) called SolaX Cloud. It slowly forces users into switching into their cloud services by removing options for local connections. This takes away the freedom of control over what you bought from the users. It's also a privacy concern and opens options of changing rules after purchase, since the only way to access some data is officially only through their system, they can paywall functions any time.

Incidents

This is a list of all consumer-protection incidents this company is involved in. Any incidents not mentioned here can be found in the SolaX category.

Security concerns

1. Always open WiFi access point - The Pocket WiFi Adapter keeps always open, unsecured WiFi access point meant for configuration. Malicious attackers could use this to send ModBus commands to the inverter or to further infiltrate your home wifi.
2. Some configuration are stored cleartext and attackers in radio range can access them. This could give them pre-shared keys for wifi allowing them to access your home wifi.
3. The password for the web admin UI is same as wifi SSID.

As far as I am aware these issues have not been fixed.

Removal of modbus from LAN adapter

New versions of Pocket LAN adapter (since at least V3.0) do not include ModBus support anymore, this means that HomeAssistant integration is not possible and only way of accessing the data and settings is via their cloud & app.