What is CVE-2024-50684?

CVE-2024-50684 is a medium-severity vulnerability in Sungrowpower Isolarcloud, classified under Use of Insufficiently Random Values. CVSS score: 6.5/10. Published 2025-02-26.

How severe is CVE-2024-50684?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Sungrowpower Isolarcloud

CVE-2024-50684

SunGrow iSolarCloud Android app V2.1.6.20241017 and prior uses an insecure AES key to encrypt client data (insufficient entropy). This may allow attackers to decrypt intercepted communications between the mobile app and iSolarCloud.

EPSS: 0.003 (25.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N.

Affected products

Sungrowpower Isolarcloud
N/a — versions n/a

Weakness classification (CWE)

CWE-330 — Use of Insufficiently Random Values

References

cve@mitre.org (Vendor Advisory)

Frequently asked questions

What is CVE-2024-50684?: CVE-2024-50684 is a medium-severity vulnerability in Sungrowpower Isolarcloud, classified under Use of Insufficiently Random Values. CVSS score: 6.5/10. Published 2025-02-26.
How severe is CVE-2024-50684?: Medium severity. CVSS v3 base score is 6.5 out of 10.