CVE-2024-50684: Medium severity sungrow isolarcloud vulnerability
SunGrow iSolarCloud Android app V2.1.6.20241017 and prior uses an insecure AES key to encrypt client data (insufficient entropy). This may allow attackers to decrypt intercepted communications between the mobile app and iSolarCloud.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50684?
CVE-2024-50684 is considered a high severity vulnerability due to its potential for allowing decryption of sensitive client communications.
How do I fix CVE-2024-50684?
To fix CVE-2024-50684, update the SunGrow iSolarCloud Android app to version 2.1.6.20241018 or later which addresses the insecure AES key issue.
What are the risks associated with CVE-2024-50684?
The risks of CVE-2024-50684 include unauthorized access to client data and potential interception of sensitive communications between the app and iSolarCloud.
Which versions of the SunGrow iSolarCloud app are affected by CVE-2024-50684?
CVE-2024-50684 affects SunGrow iSolarCloud app versions up to and including 2.1.6.20241017.
Is there a known exploit for CVE-2024-50684?
As of now, there are no public details regarding specific exploits for CVE-2024-50684, but its nature implies that targeted attacks could be possible.