CVE-2024-50696

SunGrow WiNet-S V200.001.00.P025 and earlier versions is missing integrity checks for firmware upgrades

High · published February 26, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
12.6
In the wild
Unconfirmed
What it is

SunGrow WiNet-S V200.001.00.P025 and earlier versions is missing integrity checks for firmware upgrades. Sending a specific MQTT message allows an update to an inverter or a WiNet connectivity dongle with a bogus firmware file that is located on attacker-controlled server.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00225 · 12.6th percentile
Published
2025-02-26T00:00Z
EPSS history
Timeline
  • 26 FEB 00:00Z
    SunGrow WiNet-S V200.001.00.P025 and earlier versions is missing integrity checks for firmware upgrades
    cvelistv5