CVE-2024-50691
High
Description
SunGrow iSolarCloud Android app V2.1.6.20241104 and prior suffers from Missing SSL Certificate Validation. The app explicitly ignores certificate errors and is vulnerable to MiTM attacks. Attackers can impersonate the iSolarCloud server and communicate with the Android app.
SeverityHigh
CVSS7.4
Exploit probability—
ProductSungrowpower Isolarcloud
PublishedFeb 26, 2025
First seenFeb 26, 2025
Weakness typeCWE-295CWE-295
How to fix
Update
- sungrowpower isolarcloud2.1.6.20241115 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sungrowpower isolarcloud | v < 2.1.6.20241115 | 2.1.6.20241115 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.