CVE-2025-7768criticalCWE-798

CVE-2025-7768: critical vulnerability in Tigo Energy Cloud Connect Advanced

Use of Hard-coded Credentials in Tigo Energy Cloud Connect Advanced

Published

Follow this CVE+ Monitor Cloud Connect Advanced

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.3epss 0.6%
Tigo Energy's Cloud Connect Advanced (CCA) device contains hard-coded credentials that allow unauthorized users to gain administrative access. This vulnerability enables attackers to escalate privileges and take full control of the device, potentially modifying system settings, disrupting solar energy production, and interfering with safety mechanisms.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Tigo Energy · Cloud Connect Advanced
Related CVEs — Tigo Energy Cloud Connect Advanced

In the same product, most dangerous first.

CVE-2025-7769HIGHImproper Neutralization of Special Elements used in a Command ('Command Injection') in Tigo Energy Cloud Connect AdvancedEPSS 23.0%CVE-2025-7770HIGHPredictable Seed in Pseudo-Random Number Generator (PRNG) in Tigo Energy Cloud Connect AdvancedEPSS 0.6%