CVE-2024-50692

The SunGrow WiNet-SV200 LAN communication module (version 0.001.00.P027 and earlier) is vulnerable to a trust management issue due to hardcoded MQTT credentials . An attacker can exploit this to send arbitrary commands to any inverter. Furthermore, because the system does not use TLS to identify ...