EG4 Electronics EG4 Inverters Improper Restriction of Excessive Authentication Attempts

The affected product does not limit the number of attempts for inputting

the correct PIN for a registered product, which may allow an attacker

to gain unauthorized access using brute-force methods if they possess a

valid device serial number. The API provides clear feedback when the

correct PIN is entered. This vulnerability was patched in a server-side

update on April 6, 2025.