Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SunGrow iSolarCloud Android app V2.1.6.20241104 and prior suffers from Missing SSL Certificate Validation. The app explicitly ignores certificate errors and is vulnerable to MiTM attacks. Attackers can impersonate the iSolarCloud server and communicate with the Android app.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SunGrow iSolarCloud 安全漏洞
Vulnerability Description
SunGrow iSolarCloud是中国阳光电源（SunGrow）公司的一款用于新能源电站管理的安卓应用。用于电站数据采集、监控、运维及运营管理。 SunGrow iSolarCloud Android app V2.1.6.20241104版本及之前版本存在安全漏洞，该漏洞源于缺少SSL证书验证，容易受到中间人攻击。
CVSS Information
N/A
Vulnerability Type
N/A