Monitoring Platform (Cloud API & Device Control API) vulnerabilities
1 known vulnerability in Monitoring Platform (Cloud API & Device Control API) from SolisCloud. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.3average CVSS score
Latest first
- 8.3 High severity
Monitoring Platform (Cloud API & Device…: Authorization Bypass Through User-Controlled Key
The SolisCloud API suffers from a Broken Access Control vulnerability, specifically an Insecure Direct Object Reference (IDOR), where any authenticated user can access detailed data of any plant by altering the plant_id in the request.