CVEvulnerability

CVE-2024-50691

7.4 HIGH Published 2025-02-26 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-02-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.4 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-295

Description

SunGrow iSolarCloud Android app V2.1.6.20241104 and prior suffers from Missing SSL Certificate Validation. The app explicitly ignores certificate errors and is vulnerable to MiTM attacks. Attackers can impersonate the iSolarCloud server and communicate with the Android app.

Affected configurations

• sungrowpower isolarcloud (< 2.1.6.20241115)

Related

Weakness · CWE (1)

  • CWE-295 Improper Certificate Validation weakness

References