Critical · published January 23, 2024
🚨 An unsecured WiFi access point is left wide open in the SolaX Pocket WiFi 3, allowing anyone nearby to connect without a password! 🔥 Think of it like a public café with free WiFi, but the staff forgot to change the password from 'guest'—everyone inside can access sensitive information without so much as a coffee purchase! This oversight is absolutely devastating; an attacker can connect to the device's WiFi, access the web-based configuration utility, and potentially manipulate the ModBus protocol interface. Imagine someone walking in, changing the settings, or snooping around your network—definitely not the guest experience you want!
Think of it like a public café with free WiFi, but the staff forgot to change the password from 'guest'—everyone inside can access sensitive information without so much as a coffee purchase! The vulnerability arises from the lack of authentication on the WiFi network provided by the SolaX device, allowing unauthorized access to its configuration interface and ModBus communication. This means that anyone within range can interact with the device without any security barriers.
This oversight is absolutely devastating; an attacker can connect to the device's WiFi, access the web-based configuration utility, and potentially manipulate the ModBus protocol interface. Imagine someone walking in, changing the settings, or snooping around your network—definitely not the guest experience you want! To secure your SolaX Pocket WiFi 3, immediately apply any available firmware updates to the latest version, which should address this vulnerability. Additionally, change your network settings to enforce authentication and review your device's configuration post-update. 🔒 You've got this! Follow these steps, and you'll have your device protected in no time! 🛡️