PatchTheCVEsungrowpower vulnerabilities
Recent CVEs affecting sungrowpower products. 15 tracked.
sungrowpower has 15 tracked vulnerabilities, 9 critical. A fixed release or vendor patch exists for 15. Most recent: 2025-02-26. Highest priority: CVE-2024-50698 (score 51/100).
- CVE-2024-50698 CRITICAL 9.8 UPGRADE SunGrow WiNet-SV200.001.00.P027 and earlier versions is vulnerable to heap-based buffer overflow due to bounds
- CVE-2024-50697 HIGH 8.1 UPGRADE In SunGrow WiNet-SV200.001.00.P027 and earlier versions, when decrypting MQTT messages, the code that parses s
- CVE-2024-50696 HIGH 7.5 UPGRADE SunGrow WiNet-S V200.001.00.P025 and earlier versions is missing integrity checks for firmware upgrades
- CVE-2024-50695 CRITICAL 9.8 UPGRADE SunGrow WiNet-SV200.001.00.P027 and earlier versions is vulnerable to stack-based buffer overflow when parsing
- CVE-2024-50694 CRITICAL 9.8 UPGRADE In SunGrow WiNet-SV200.001.00.P027 and earlier versions, when copying the timestamp read from an MQTT message,
- CVE-2024-50693 CRITICAL 9.1 UPGRADE SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references
- CVE-2024-50692 MEDIUM 5.4 UPGRADE SunGrow WiNet-SV200.001.00.P027 and earlier versions contains hardcoded MQTT credentials that allow an attacke
- CVE-2024-50691 HIGH 7.4 UPGRADE SunGrow iSolarCloud Android app V2.1.6.20241104 and prior suffers from Missing SSL Certificate Validation
- CVE-2024-50690 MEDIUM 6.5 UPGRADE SunGrow WiNet-SV200.001.00.P027 and earlier versions contains a hardcoded password that can be used to decrypt
- CVE-2024-50689 CRITICAL 9.1 UPGRADE SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references
- CVE-2024-50688 CRITICAL 9.8 UPGRADE SunGrow iSolarCloud Android application V2.1.6.20241017 and prior contains hardcoded credentials
- CVE-2024-50687 CRITICAL 9.1 UPGRADE SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references
- CVE-2024-50686 CRITICAL 9.1 UPGRADE SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references
- CVE-2024-50685 CRITICAL 9.1 UPGRADE SunGrow iSolarCloud before the October 31, 2024 remediation, is vulnerable to insecure direct object reference
- CVE-2024-50684 MEDIUM 6.5 UPGRADE SunGrow iSolarCloud Android app V2.1.6.20241017 and prior uses an insecure AES key to encrypt client data (ins
FAQ
How do I fix sungrowpower vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sungrowpower being exploited right now?
None of the tracked sungrowpower CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sungrowpower CVE should I patch first?
CVE-2024-50698 currently ranks highest (51/100): SunGrow WiNet-SV200.001.00.P027 and earlier versions is vulnerable to heap-based buffer overflow due to bounds.