Vulnerabilities

TI-2024-34089 CVE-2024-50693 · GHSA-296f-cx2x-g274

SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure…

MEDIUM 48

SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the userService API model.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00509 Published 2025-02-26 No fix listed CWE-639

TI-2024-34087 CVE-2024-50691 · GHSA-f9j6-qh7x-56fv

SunGrow iSolarCloud Android app V2.1.6.20241104 and prior suffers from Missing SSL…

LOW 34

SunGrow iSolarCloud Android app V2.1.6.20241104 and prior suffers from Missing SSL Certificate Validation.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00228 Published 2025-02-26 No fix listed CWE-295

TI-2024-34085 CVE-2024-50689 · GHSA-q552-8mhx-p6q2

SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure…

MEDIUM 48

SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the orgService API model.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00491 Published 2025-02-26 No fix listed CWE-639

TI-2024-34084 CVE-2024-50688 · GHSA-qx2g-8xw4-6pqp

SunGrow iSolarCloud Android application V2.1.6.20241017 and prior contains hardcoded…

MEDIUM 49

SunGrow iSolarCloud Android application V2.1.6.20241017 and prior contains hardcoded credentials.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00513 Published 2025-02-26 No fix listed CWE-798

TI-2024-34083 CVE-2024-50687 · GHSA-pmh5-6pj5-85x2

SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure…

MEDIUM 48

SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the devService API model.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00444 Published 2025-02-26 No fix listed CWE-639

TI-2024-34082 CVE-2024-50686 · GHSA-cv8j-mj39-x344

SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure…

MEDIUM 46

SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the commonService API model.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00491 Published 2025-02-26 No fix listed CWE-639

TI-2024-34081 CVE-2024-50685 · GHSA-8gmp-mv5g-3r5v

SunGrow iSolarCloud before the October 31, 2024 remediation, is vulnerable to insecure…

MEDIUM 48

SunGrow iSolarCloud before the October 31, 2024 remediation, is vulnerable to insecure direct object references (IDOR) via the powerStationService API model.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00491 Published 2025-02-26 No fix listed CWE-639

TI-2024-34080 CVE-2024-50684 · GHSA-rmc5-w442-6f93

SunGrow iSolarCloud Android app V2.1.6.20241017 and prior uses an insecure AES key to…

LOW 29

SunGrow iSolarCloud Android app V2.1.6.20241017 and prior uses an insecure AES key to encrypt client data (insufficient entropy).

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00339 Published 2025-02-26 No fix listed CWE-330

Vulnerabilities

Filters