CVE-2024-50693
Critical
Description
SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the userService API model.
SeverityCritical
CVSS9.1
Exploit probability—
ProductSungrowpower Isolarcloud
PublishedFeb 26, 2025
First seenFeb 26, 2025
How to fix
Update
- sungrowpower isolarcloud2024-10-31 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sungrowpower isolarcloud | v < 2024-10-31 | 2024-10-31 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.