Critical · 9.1 CVE-2024-50693 EUVD-2025-5293GHSA-296f-cx2x-g274

SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the userService A…

Published Feb 26, 2025 · Updated Mar 4, 2025 · Assigned by mitre

Description

SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the userService API model.

Advisories 1

ICSA-25-072-12 Sungrow iSolarCloud Android App, WiNet Firmware CISA ICS & IT advisories · Mar 13, 2025

References

https://en.sungrowpower.com/security-notice-detail-2/6120