CVE-2024-50686
CVSS 3.1 Score 9.1 of 10 (high)
Details
Published Feb 26, 2025
Updated: Mar 4, 2025
CWE ID 639
Summary
CVE-2024-50686 is a newly discovered vulnerability affecting SunGrow iSolarCloud before the planned October 31, 2024 remediation. This issue stems from insecure direct object references (IDOR) in the commonService API model. Malicious actors can exploit this weakness to gain unauthorized access to sensitive information or make unintended modifications, potentially leading to significant data breaches or system disruptions. It is crucial for SunGrow to implement the upcoming patch to mitigate this risk promptly.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.