CVE-2020-9306

CVE-2020-9306 is a critical vulnerability affecting Tesla SolarCity Solar Monitoring Gateway devices up to version 5.46.43, stemming from the use of hard-coded credentials for a Python user account stored in a .pyc file. This allows an unauthenticated attacker on the adjacent network to gain full control over the device, leading to high impact on confidentiality, integrity, and availability. While no public exploit code or active exploitation has been confirmed, the vulnerability has garnered some community discussion and media coverage, indicating awareness of its potential impact.