CVE-2024-50688

EPSS 0.16%
Veröffentlicht 26.02.2025 21:15:17
Zuletzt bearbeitet 07.04.2025 18:51:39
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

SunGrow iSolarCloud Android application V2.1.6.20241017 and prior contains hardcoded credentials. The application (regardless of the user account) and the cloud uses the same MQTT credentials for exchanging the device telemetry.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Sungrowpower ≫ Isolarcloud SwPlatformandroid Version < 2.1.6.20241104

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.16%	0.368

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-798 Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

https://en.sungrowpower.com/security-notice-detail-2/6122

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-50688

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-50688

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-50688

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2024-50688