The security leak was found by the own investigation of Faro Media. Supplier SMA Sunbelt Energy confirms the findings and speaks of a ‘wrong configuration’. “Due to an insecure implementation, it would have been possible for attackers to set the power settings of this PV system”, a spokesperson of SMA replied by e-mail. “The installer did not follow SMA’s instructions and security advice”. Because it is an installation error, it can be safely assumed that the network has been fully accessible all this time since it was put into use more than a year ago.
The vulnerability has been reported to both SMA and SEC and Island Governor Johnathan Johnson of Saba. “Immediately after your report, we have corrected the configuration of this system in collaboration with the customer”, wrote the SMA spokesperson.
Since February 2019, the electricity has come to Saba for a large part of two solar parks and a storage system. On sunny days the diesel generators can stand still for up to ten hours. Thanks to the storage system, SEC saves around 300 liters of diesel per hour.
Saba Solar Park: who turns off the light?