s
sungrow
Security Risk Profile
76
/100
highSecurity Risk Score
Comprehensive risk assessment based on 19 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from January 24, 2025 to present
19
Total CVEs
14
Critical+High
1
Exploited
13
Unpatched
Threat Assessment
Avg CVSS
8.3
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
13
Critical/High
Risk Level
76/100
high
⚠️ 1 Active Exploits🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
10High
4Medium
4Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
4
Most Affected Products
1. SunGrow iSolarCloud10
2. Sungrowpower Winet-s Firmware8
3. SunGrow WiNet-SV2006
4. Sungrowpower Isolarcloud5
5. Sungrowpower Isolarcloud Android3
Recent Vulnerabilities
See more →CVE-2026-107194
CVSS 9.2critical
Oct 7, 2026🔧 No Patch
CVE-2025-29756
CVSS 8.3high
MQTT implementation in Sungrow iSolarCloud allowed users to subscribe to all data of all connected inverters
Jun 11, 2025
CVE-2025-4534
CVSS 6.3EPSS 0%medium
SunGrow Logger1000 weak password
May 11, 2025🔧 No Patch
https://www.bleepingcomputer.com/news/security/dozens-of-solar-inverter-flaws-could-be-exploited-to-attack-power-grids/
unknown
Dozens of solar inverter flaws could be exploited to attack power grids
Mar 27, 2025⚠ Exploited🔧 No Patch
CVE-2024-50686
CVSS 9.1critical
Feb 26, 2025🔧 No Patch
CVE-2024-50685
CVSS 9.1critical
Feb 26, 2025🔧 No Patch
CVE-2024-50684
CVSS 6.5medium
Feb 26, 2025🔧 No Patch
CVE-2024-50689
CVSS 9.1critical
Feb 26, 2025🔧 No Patch
CVE-2024-50688
CVSS 9.8critical
Feb 26, 2025🔧 No Patch
CVE-2024-50687
CVSS 9.1critical
Feb 26, 2025🔧 No Patch
Monitor sungrow in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.