CVE-2024-50687

—

CVSS 3.1

9.1 critical

EPSS

<1%p37

Published

Feb 26, 2025 (Feb 26, 2025)

Modified

Jun 17, 2026

Description

SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the devService API model.

Vendors: sungrowpower
Products: isolarcloud
Weakness: CWE-639
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.