CVE-2024-50691

Name of the Vulnerable Software and Affected Versions SunGrow iSolarCloud Android app versions V2.1.6.20241104 and prior

Description The issue concerns a Missing SSL Certificate Validation in the app, which explicitly ignores certificate errors, making it vulnerable to Man-in-the-Middle (MiTM) attacks. This allows attackers to impersonate the iSolarCloud server and communicate with the Android app.

Recommendations For SunGrow iSolarCloud Android app versions V2.1.6.20241104 and prior, update to a version that properly validates SSL certificates to prevent MiTM attacks.