Thousands of European Solar and Wind Systems Exposed to Cyberattacks

Thousands of Exposed Energy Systems

Researchers from internet intelligence company Modat have identified 8,547 management interfaces and control panels for solar parks and wind farms that are accessible via public internet connections across 35 countries, leaving them vulnerable to cyberattacks. The study mapped solar parks and wind farms in 40 countries across the EU, the European Free Trade Association, and EU candidate states.

The analysis showed that 7,942 solar systems in 34 countries were exposed to potential unauthorized access. Spain alone accounts for 2,766 exposed solar parks, or 35% of all exposures. Together with Germany, Greece, and Italy, the top four countries account for 76% of the total. For wind farms, the analysts found 605 exposed systems in 23 countries, with Germany and Italy together accounting for 67%. The Netherlands accounted for 132 exposed solar systems and 9 wind farms.

Full Control at 181 Locations

In most cases, the management interfaces and control panels were secured with a login screen. However, at 181 locations, the researchers had complete control over the systems, allowing them to shut down wind turbines or an entire wind farm with the push of a button. Once inside the control systems, they could also view live production data and the turbine's location.

The researchers say they located the publicly accessible management systems within a few hours. "Physically, wind and sun are the most robust parts of our energy supply. Digitally, they are fragmented, often exposed to the internet and not always monitored. What we can map in hours, an attacker can map in hours too. You can't defend what you can't see, and no one can see this whole landscape alone," said Soufian El Yadmani, founder and CEO of Modat.

Warnings and Prior Vulnerabilities

Administrators of the affected interfaces have been notified and urged to take their systems offline as soon as possible to reduce the risk of becoming the target of a cyberattack. The findings were presented on the main stage of The ONE Conference at the World Forum in The Hague earlier this week.

The study is not the first time weaknesses have been detected in renewable energy products. In July, the Chaos Computer Club and a security researcher found "devastating security vulnerabilities" in inverters for balcony and roof solar systems from the Chinese company Hoymiles.

Sources: Cybernews