Critical · 9.1 CVE-2024-50686 EUVD-2025-5290GHSA-cv8j-mj39-x344

SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the commonService…

Published Feb 26, 2025 · Updated Mar 4, 2025 · Assigned by mitre

Description

SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the commonService API model.

Advisories 1

ICSA-25-072-12 Sungrow iSolarCloud Android App, WiNet Firmware CISA ICS & IT advisories · Mar 13, 2025

References

https://en.sungrowpower.com/security-notice-detail-2/6112