CVE-2024-50684

6.5 mediumEPSS 0.3%

Medium (6.5) in sungrowpower isolarcloud. EPSS 0.3% chance of exploitation in the next 30 days.

SunGrow iSolarCloud Android app V2.1.6.20241017 and prior uses an insecure AES key to encrypt client data (insufficient entropy). This may allow attackers to decrypt intercepted communications between the mobile app and iSolarCloud.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 27% of CVEs (scores of 2026-11-01)
CWE: CWE-330
Published: 2025-02-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sungrowpower:isolarcloud

References

https://en.sungrowpower.com/security-notice-detail-2/6126

Check your stack JSON