PT-2025-8741 · Sungrow · Sungrow Isolarcloud
CVE-2024-50685
·
Publicado
2025-02-26
·
Atualizado
2025-03-08
CVSS v3.1
9.1
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
SunGrow iSolarCloud versions prior to the October 31, 2024 remediation
Description
The issue is related to insecure direct object references (IDOR) via the "powerStationService API model".
Recommendations
For versions prior to the October 31, 2024 remediation, update to a version that includes the remediation patch to resolve the issue.
Correção
IDOR
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Sungrow Isolarcloud