CVE-2024-50691: High severity sungrow isolarcloud vulnerability
SunGrow iSolarCloud Android app V2.1.6.20241104 and prior suffers from Missing SSL Certificate Validation. The app explicitly ignores certificate errors and is vulnerable to MiTM attacks. Attackers can impersonate the iSolarCloud server and communicate with the Android app.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50691?
CVE-2024-50691 is considered a high-severity vulnerability due to its potential for exploitation through man-in-the-middle attacks.
How do I fix CVE-2024-50691?
To fix CVE-2024-50691, update the SunGrow iSolarCloud Android app to version 2.1.7 or later, which includes proper SSL certificate validation.
What are the risks associated with CVE-2024-50691?
The risks associated with CVE-2024-50691 include exposure to man-in-the-middle attacks, where attackers could intercept sensitive data between the app and the server.
Which versions of the SunGrow iSolarCloud app are affected by CVE-2024-50691?
The affected versions of the SunGrow iSolarCloud app are V2.1.6.20241104 and prior.
Can CVE-2024-50691 allow data interception?
Yes, CVE-2024-50691 can allow attackers to intercept and manipulate data communicated between the app and the server.