Critical · 9.1 CVE-2024-50685 EUVD-2025-5291GHSA-8gmp-mv5g-3r5v

SunGrow iSolarCloud before the October 31, 2024 remediation, is vulnerable to insecure direct object references (IDOR) via the powerStation…

Published Feb 26, 2025 · Updated Mar 4, 2025 · Assigned by mitre

Description

SunGrow iSolarCloud before the October 31, 2024 remediation, is vulnerable to insecure direct object references (IDOR) via the powerStationService API model.

Advisories 1

ICSA-25-072-12 Sungrow iSolarCloud Android App, WiNet Firmware CISA ICS & IT advisories · Mar 13, 2025

References

https://en.sungrowpower.com/security-notice-detail-2/6118