CVE-2024-28756

CVSS 3.1 Score 5.9 of 10 (medium)

Details

Published Mar 21, 2024
Updated: Mar 22, 2024

Summary

CVE-2024-28756 is a vulnerability in the SolarEdge mySolarEdge application for Android, version 2.20.1 and earlier. The vulnerability allows a Machine-in-the-middle (MitM) attacker to intercept and modify network traffic between the application and the server due to a certificate verification issue. The risk score for this vulnerability is 25, indicating a medium severity level. The exploitability score is 1.6, suggesting a low likelihood of exploitation. The potential danger to organizations using this application includes unauthorized access, data tampering, and interception of sensitive information. No remediation steps or mitigation measures are provided in the available information.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-28756 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options