Critical · 9.1 CVE-2024-50689 EUVD-2025-5285GHSA-q552-8mhx-p6q2

SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the orgService AP…

Published Feb 26, 2025 · Updated Mar 4, 2025 · Assigned by mitre

Description

SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the orgService API model.

Advisories 1

ICSA-25-072-12 Sungrow iSolarCloud Android App, WiNet Firmware CISA ICS & IT advisories · Mar 13, 2025

References

https://en.sungrowpower.com/security-notice-detail-2/6116