sungrow
Security Risk Profile
57
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 18 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from January 24, 2025 to present
18
Total CVEs
13
Critical+High
1
Exploited
12
Unpatched
Threat Assessment
Avg CVSS
8.3
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
12
Critical/High
Risk Level
57/100
medium
⚠️ 1 Active Exploits
Severity Distribution
Critical
9High
4Medium
4Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
4
Most Affected Products
1. SunGrow iSolarCloud9
2. Sungrowpower Winet-s Firmware8
3. SunGrow WiNet-SV2006
4. Sungrowpower Isolarcloud5
5. Sungrowpower Isolarcloud Android3
Recent Vulnerabilities
See more →CVE-2025-29756
CVSS 8.3high
MQTT implementation in Sungrow iSolarCloud allowed users to subscribe to all data of all connected inverters
6/11/2025
CVE-2025-4534
CVSS 6.3EPSS 0%medium
SunGrow Logger1000 weak password
5/11/2025🔧 No Patch
https://www.bleepingcomputer.com/news/security/dozens-of-solar-inverter-flaws-could-be-exploited-to-attack-power-grids/
unknown
Dozens of solar inverter flaws could be exploited to attack power grids
3/27/2025⚠ Exploited🔧 No Patch
CVE-2024-50686
CVSS 9.1critical
2/26/2025🔧 No Patch
CVE-2024-50685
CVSS 9.1critical
2/26/2025🔧 No Patch
CVE-2024-50684
CVSS 6.5medium
2/26/2025🔧 No Patch
CVE-2024-50689
CVSS 9.1critical
2/26/2025🔧 No Patch
CVE-2024-50688
CVSS 9.8critical
2/26/2025🔧 No Patch
CVE-2024-50687
CVSS 9.1critical
2/26/2025🔧 No Patch
CVE-2024-50693
CVSS 9.1critical
2/26/2025🔧 No Patch
Monitor sungrow in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.