Hundreds of Tesla Powerwall Backup Gateways Potentially Exposed to Hacker Attacks

guest · Nov 17, 2020

Hundreds of Tesla Powerwall Gateways Potentially Exposed to Hacker Attacks
November 17, 2020
https://www.securityweek.com/hundreds-tesla-powerwall-gateways-potentially-exposed-hacker-attacks

Tesla Powerwall is an energy storage product for homes that uses a battery to store power from solar panels or the grid, ensuring that users continue to have power even during an outage. The Backup Gateway component of the product is designed to provide energy management and monitoring and it’s responsible for controlling the connection to the power grid, detecting outages, and switching to backup power.

In the past, at least two research groups analyzed the product, including various undocumented API calls to the Backup Gateway and potential vulnerabilities.
Click to expand...

Members of the veteran security research group The Hacker's Choice revealed earlier this year that a remote attacker could cause damage due to the fact that the Gateway, which is often connected to the internet via Wi-Fi, had an improperly protected management interface.

Rapid7 said 160 of the Gateway devices were located in the United States, with significant numbers located in Italy and France.
The company explained that exposed devices are easy to find on the web due to the fact that the Backup Gateway exposes a web server on HTTPS port 443. Once a device has been identified, accessing it may not be difficult due to the use of weak default credentials.
Click to expand...

Rapid7 disclosed its findings to Tesla before publishing its blog post and the car maker said it had already taken some steps to make authentication more secure, and it plans on rolling out more security features in the future. SecurityWeek has reached out to Tesla for comment, but it has yet to hear back.
Click to expand...

Rapid7: Don’t Put It on the Internet: Tesla Backup Gateway Edition

This blog post aims to increase user awareness of the privacy and security risks of connecting devices to the internet. In this edition, we address Tesla Backup Gateways and identify some key areas where Tesla could improve security and privacy to help customers protect themselves.
Click to expand...

Log in or Sign up

Hundreds of Tesla Powerwall Backup Gateways Potentially Exposed to Hacker Attacks

guest Guest

Log in or Sign up

Hundreds of Tesla Powerwall Backup Gateways Potentially Exposed to Hacker Attacks

guest Guest

Useful Searches