Описание
The SolarEdge mySolarEdge application before 2.20.1 for Android has a certificate verification issue that allows a Machine-in-the-middle (MitM) attacker to read and alter all network traffic between the application and the server.
Ссылки
- Vendor Advisory
- ExploitThird Party Advisory
- Vendor Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.20.1 (исключая)
cpe:2.3:a:solaredge:mysolaredge:*:*:*:*:*:android:*:*
EPSS
Процентиль: 19%
0.00061
Низкий
5.9 Medium
CVSS3
Дефекты
CWE-125
Связанные уязвимости
CVSS3: 5.9
github
почти 2 года назад
The SolarEdge mySolarEdge application before 2.20.1 for Android has a certificate verification issue that allows a Machine-in-the-middle (MitM) attacker to read and alter all network traffic between the application and the server.
EPSS
Процентиль: 19%
0.00061
Низкий
5.9 Medium
CVSS3
Дефекты
CWE-125