Critical · 9.1 CVE-2024-50687 EUVD-2025-5288GHSA-pmh5-6pj5-85x2

SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the devService AP…

Published Feb 26, 2025 · Updated Mar 4, 2025 · Assigned by mitre

Description

SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the devService API model.

Advisories 1

ICSA-25-072-12 Sungrow iSolarCloud Android App, WiNet Firmware CISA ICS & IT advisories · Mar 13, 2025

References

https://en.sungrowpower.com/security-notice-detail-2/6114