My installation consists of GridBOSS and 18kPv system. Both arrived with wifi/bluetooth dongles. I see following security vulnerabilities, which allow remote takeover:
1. Wi-fi access point mode cannot be disabled, even after initial configuration is complete. This allows a person within proximity to perform attack on access point and reconfigure dongle. I am aware that it is possible to set a password on those APs, but it is still a vulnerability, as they do advertise, and even absent other vulnerabilities it gives remote person a way to gain information about the system without physical contact.
2. Bluetooth configuration option is always available and I cannot find a way to secure it. Remote attacker can use bluetooth to remotely reconfigure wifi network and use that connection to see configuration as well as change it.
Please provide the recommendations, how to disable wifi access point and secure the dongle against random people connecting to it remotely via bluetooth. Right now people can literally park next to my house and start messing with my electrical system without me even knowing.
