Security Incident Response

Sungrow PSIRT Security Incident Response

Sungrow PSIRT is a dedicated team managing product security vulnerabilities through IEC 62443-4-1 compliance, responsible disclosure, and proactive remediation to safeguard customer systems.

Learn More

Reporting Suspected Vulnerabilities

To report a vulnerability, email us at psirt@sungrowpower.com

Vulnerability Response Process

Sungrow PSIRT will respond to vulnerability

according to vulnerability response process

Security Vulnerability Bulletin

Sort by:

Title

Product

CVE ID

Severity

Status

Date

【Security Advisory】MQTT implementation in Sungrow iSolarCloud allowed users to subscribe to inverter data(CVE-2025-29756)

【Security Advisory】Sungrow Logger1000A/B has a weak password vulnerability (CVE-2025-4534)

【Security Advisory】Sungrow iSolarCloud Android APP – Hardcoded MQTT Credentials Vulnerability (CVE-2024-50688)

iSolarCloud Android App & Cloud Services

【Security Advisory】Sungrow iSolarCloud Android App – Ignored Certificate Validation Vulnerability (CVE-2024-50691)

iSolarCloud Android App

【Security Advisory】Sungrow iSolarCloud Android App – Weak Encryption Key Vulnerability (CVE-2024-50684)

iSolarCloud Android App

TOP