SunGrow

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

SunGrow records in CISA KEV

No SunGrow vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2025-04049 CVE-2025-4534 · GHSA-w886-q54p-h4w2

SunGrow Logger1000 weak password

MEDIUM 61

A vulnerability, which was classified as problematic, has been found in SunGrow Logger1000 01_A.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00429 Published 2025-05-11 No fix listed CWE-521

TI-2026-69151 CVE-2026-107194 · GHSA-8f9m-p66m-hj4m

Authentication bypass in Sungrow iSolarCloud enables account takeover

MEDIUM 48

Sungrow iSolarCloud before 2026-08-25 allows authentication bypass and account takeover via "login_type":"5" in a login request, potentially leading to "local blackouts on the whole continent" in Europe.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00447 Published 2026-10-07 Fixed in 2026-08-25 CWE-288

TI-2025-21177 CVE-2025-29756 · GHSA-59wx-gr78-xr29

MQTT implementation in Sungrow iSolarCloud allowed users to subscribe to all data of all connected inverters

MEDIUM 42

SunGrow's back end users system iSolarCloud https://isolarcloud.com uses an MQTT service to transport data from the user's connected devices to the user's web browser.

CVSS 4.0HIGH 8.3 Network Low privileges No interaction EPSS 0.00265 Published 2025-06-11 Fixed in 7 June 2025 CWE-862

Open these records in search →

Critical	1
High	1
Medium	1
Low	0
No CVSS	0