CVE-2024-50687: Critical severity sungrow isolarcloud vulnerability
Published Feb 26, 2025
·Updated
SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the devService API model.
Affected Software
2 affected components
Sungrowpower Isolarcloud<2024-10-31
SunGrow iSolarCloud<October 31, 2024
Event History
Feb 26, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2024-50687?
CVE-2024-50687 has a medium severity rating due to the risk of unauthorized access through insecure direct object references.
2
How do I mitigate CVE-2024-50687?
To mitigate CVE-2024-50687, ensure that access controls are properly enforced in the devService API model.
3
What software versions are affected by CVE-2024-50687?
CVE-2024-50687 affects SunGrow iSolarCloud versions prior to October 31, 2024.
4
What type of vulnerability is CVE-2024-50687?
CVE-2024-50687 is classified as an insecure direct object reference (IDOR) vulnerability.
5
Is there a known fix for CVE-2024-50687?
A remediation for CVE-2024-50687 is expected to be available by October 31, 2024.