What is CVE-2024-50688?

CVE-2024-50688 is a critical-severity vulnerability in Sungrowpower Isolarcloud, classified under Use of Hard-coded Credentials. CVSS score: 9.8/10. Published 2025-02-26.

How severe is CVE-2024-50688?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in Sungrowpower Isolarcloud

CVE-2024-50688

SunGrow iSolarCloud Android application V2.1.6.20241017 and prior contains hardcoded credentials. The application (regardless of the user account) and the cloud uses the same MQTT credentials for exchanging the device telemetry.

EPSS: 0.005 (39.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Sungrowpower Isolarcloud
N/a — versions n/a

Weakness classification (CWE)

CWE-798 — Use of Hard-coded Credentials

References

cve@mitre.org (Vendor Advisory)

Frequently asked questions

What is CVE-2024-50688?: CVE-2024-50688 is a critical-severity vulnerability in Sungrowpower Isolarcloud, classified under Use of Hard-coded Credentials. CVSS score: 9.8/10. Published 2025-02-26.
How severe is CVE-2024-50688?: Critical severity. CVSS v3 base score is 9.8 out of 10.