Vulnerabilidades de SolisCloud

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de SolisCloud: 1 registro(s), com severidade, exploração e correções.

Monitoring Platform (Cloud API & Device Control API) 1

Somente exploradas (KEV) →

CVE-2025-13932 Alta · 8.3 CWE-639 04/12/2025

Authorization Bypass Through User-Controlled Key (IDOR) em SolisCloud Monitoring Platform (Cloud API & Device Control API)

The SolisCloud API suffers from a Broken Access Control vulnerability, specifically an Insecure Direct Object Reference (IDOR), where any authenticated user can access detailed data of any plant by altering the plant_id in the request.