İçeriğe atla
Noroxi

sungrowpower kayıtları

sungrowpower üreticisine ait 15 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

15 kayıt
  • CVE-2024-50695
    39İzleyin

    SunGrow WiNet-SV200.001.00.P027 and earlier versions is vulnerable to stack-based buffer overflow when parsing MQTT messages, due to missing

    KritikCVSS 9,8İstismar yokEPSS %0

    sungrowpower · winet-s firmware24 Oca 2025

  • CVE-2024-50698
    39İzleyin

    SunGrow WiNet-SV200.001.00.P027 and earlier versions is vulnerable to heap-based buffer overflow due to bounds checks of the MQTT message co

    KritikCVSS 9,8İstismar yokEPSS %0

    sungrowpower · winet-s firmware24 Oca 2025

  • CVE-2024-50694
    39İzleyin

    In SunGrow WiNet-SV200.001.00.P027 and earlier versions, when copying the timestamp read from an MQTT message, the underlying code does not

    KritikCVSS 9,8İstismar yokEPSS %0

    sungrowpower · winet-s firmware24 Oca 2025

  • CVE-2024-50688
    39İzleyin

    SunGrow iSolarCloud Android application V2.1.6.20241017 and prior contains hardcoded credentials.

    KritikCVSS 9,8İstismar yokEPSS %0

    sungrowpower · isolarcloud26 Şub 2025

  • CVE-2024-50693
    36İzleyin

    SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the userService AP

    KritikCVSS 9,1İstismar yokEPSS %0

    sungrowpower · isolarcloud26 Şub 2025

  • CVE-2024-50685
    36İzleyin

    SunGrow iSolarCloud before the October 31, 2024 remediation, is vulnerable to insecure direct object references (IDOR) via the powerStationS

    KritikCVSS 9,1İstismar yokEPSS %0

    sungrowpower · isolarcloud26 Şub 2025

  • CVE-2024-50689
    36İzleyin

    SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the orgService API

    KritikCVSS 9,1İstismar yokEPSS %0

    sungrowpower · isolarcloud26 Şub 2025

  • CVE-2024-50686
    36İzleyin

    SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the commonService

    KritikCVSS 9,1İstismar yokEPSS %0

    sungrowpower · isolarcloud26 Şub 2025

  • CVE-2024-50687
    36İzleyin

    SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the devService API

    KritikCVSS 9,1İstismar yokEPSS %0

    sungrowpower · isolarcloud26 Şub 2025

  • CVE-2024-50697
    32İzleyin

    In SunGrow WiNet-SV200.001.00.P027 and earlier versions, when decrypting MQTT messages, the code that parses specific TLV fields does not ha

    YüksekCVSS 8,1İstismar yokEPSS %0

    sungrowpower · winet-s firmware24 Oca 2025

  • CVE-2024-50696
    30İzleyin

    SunGrow WiNet-S V200.001.00.P025 and earlier versions is missing integrity checks for firmware upgrades.

    YüksekCVSS 7,5İstismar yokEPSS %0

    sungrowpower · winet-s firmware26 Şub 2025

  • CVE-2024-50691
    29İzleyin

    SunGrow iSolarCloud Android app V2.1.6.20241104 and prior suffers from Missing SSL Certificate Validation.

    YüksekCVSS 7,4İstismar yokEPSS %0

    sungrowpower · isolarcloud26 Şub 2025

  • CVE-2024-50684
    26İzleyin

    SunGrow iSolarCloud Android app V2.1.6.20241017 and prior uses an insecure AES key to encrypt client data (insufficient entropy).

    OrtaCVSS 6,5İstismar yokEPSS %0

    sungrowpower · isolarcloud26 Şub 2025

  • CVE-2024-50690
    26İzleyin

    SunGrow WiNet-SV200.001.00.P027 and earlier versions contains a hardcoded password that can be used to decrypt all firmware updates.

    OrtaCVSS 6,5İstismar yokEPSS %0

    sungrowpower · winet-s firmware24 Oca 2025

  • CVE-2024-50692
    21İzleyin

    SunGrow WiNet-SV200.001.00.P027 and earlier versions contains hardcoded MQTT credentials that allow an attacker to send arbitrary commands t

    OrtaCVSS 5,4İstismar yokEPSS %0

    sungrowpower · winet-s firmware24 Oca 2025