critical9.1
CVE-2024-50685
SunGrow iSolarCloud before the October 31, 2024 remediation, is vulnerable to insecure direct object references (IDOR) via the powerStationService API model.
Impact
SunGrow iSolarCloud before the October 31, 2024 remediation, is vulnerable to insecure direct object references (IDOR) via the powerStationService API model.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sungrowpower | Isolarcloud | before 2024-10-31 |