CVE-2024-50691

Summary

CVE-2024-50691 is a cybersecurity vulnerability affecting SunGrow iSolarCloud Android app version 2.1.6.20241104 and earlier. This issue involves missing SSL certificate validation, allowing attackers to conduct man-in-the-middle (MiTM) attacks. The app overlooks certificate errors, potentially enabling unauthorized impersonation of the iSolarCloud server and enabling unsecured communication between the Android app and the server. This vulnerability poses a significant security risk to users of the iSolarCloud app, making it essential for SunGrow to address this issue promptly with a patch or update.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.