CVE-2024-50685: Critical severity sungrow isolarcloud vulnerability
Published Feb 26, 2025
·Updated
SunGrow iSolarCloud before the October 31, 2024 remediation, is vulnerable to insecure direct object references (IDOR) via the powerStationService API model.
Affected Software
2 affected components
Sungrowpower Isolarcloud<2024-10-31
SunGrow iSolarCloud<October 31, 2024
Event History
Feb 26, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2024-50685?
CVE-2024-50685 has a severity rating that indicates it poses a significant security risk due to the potential for unauthorized access.
2
How do I fix CVE-2024-50685?
To fix CVE-2024-50685, apply the remediation provided by SunGrow after October 31, 2024, as recommended in their security notice.
3
What kind of vulnerability is CVE-2024-50685?
CVE-2024-50685 is categorized as an insecure direct object reference (IDOR) vulnerability.
4
Which software is affected by CVE-2024-50685?
CVE-2024-50685 affects SunGrow iSolarCloud versions released before October 31, 2024.
5
What are the risks associated with CVE-2024-50685?
The risks of CVE-2024-50685 include potential unauthorized access to sensitive resources via the powerStationService API.