CVE-2024-50685

概要

参考情報

• en.sungrowpower.com/security-notice-detail-2/6118 · Vendor Advisory

isolarcloud のその他の脆弱性

• CVE-2024-50693緊急 9.1SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the userService AP…
• CVE-2024-50691高 7.4SunGrow iSolarCloud Android app V2.1.6.20241104 and prior suffers from Missing SSL Certificate Validation. The app explicitly ignores certif…
• CVE-2024-50689緊急 9.1SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the orgService API…
• CVE-2024-50688緊急 9.8SunGrow iSolarCloud Android application V2.1.6.20241017 and prior contains hardcoded credentials. The application (regardless of the user ac…
• CVE-2024-50687緊急 9.1SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the devService API…