The way you pass your parameter isn't correct. Basically you're telling MySQL to set the value of potencia to the value of another column named power, which doesn't exist.
Try using a placeholder ? in your query and pass the parameter as payload in an array.
That also has the benefit of preventing SQL injections, since the mysql lib will take care of any escaping.
msg.topic = "... set potencia=? where ..." // omitted the rest
msg.payload = [power];