Medium severity5.9NVD Advisory· Published Mar 21, 2024· Updated Jun 17, 2026
CVE-2024-28756
CVE-2024-28756
Description
The SolarEdge mySolarEdge application before 2.20.1 for Android has a certificate verification issue that allows a Machine-in-the-middle (MitM) attacker to read and alter all network traffic between the application and the server.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:solaredge:mysolaredge:*:*:*:*:*:android:*:*+ 1 more
- cpe:2.3:a:solaredge:mysolaredge:*:*:*:*:*:android:*:*range: <2.20.1
- (no CPE)range: <2.20.1
- SolarEdge/mySolarEdge applicationdescription
Patches
Vulnerability mechanics
References
2- www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-012.txtnvdExploitThird Party Advisory
- www.solaredge.com/coordinated-vulnerability-disclosure-policy/advisories/sedg-2024-1nvdVendor Advisory
News mentions
0No linked articles in our index yet.