Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rmc5-w442-6f93

Опубликовано: 26 фев. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

SunGrow iSolarCloud Android app V2.1.6.20241017 and prior uses an insecure AES key to encrypt client data (insufficient entropy). This may allow attackers to decrypt intercepted communications between the mobile app and iSolarCloud.

SunGrow iSolarCloud Android app V2.1.6.20241017 and prior uses an insecure AES key to encrypt client data (insufficient entropy). This may allow attackers to decrypt intercepted communications between the mobile app and iSolarCloud.

EPSS

Процентиль: 29%
0.00108
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-330

Связанные уязвимости

CVSS3: 6.5
nvd
12 месяцев назад

SunGrow iSolarCloud Android app V2.1.6.20241017 and prior uses an insecure AES key to encrypt client data (insufficient entropy). This may allow attackers to decrypt intercepted communications between the mobile app and iSolarCloud.

EPSS

Процентиль: 29%
0.00108
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-330