CVE-2025-47872: fallo de gravedad media en EG4 12000XP
EG4 Electronics EG4 Inverters Observable Discrepancy
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 6.9epss 0.3%
The public-facing product registration endpoint server responds
differently depending on whether the S/N is valid and unregistered,
valid but already registered, or does not exist in the database.
Combined with the fact that serial numbers are sequentially assigned,
this allows an attacker to gain information on the product registration
status of different S/Ns.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N
Productos afectados
EG4 Electronics · EG4 12000XPEG4 Electronics · EG4 12kPVEG4 Electronics · EG4 18kPVEG4 Electronics · EG4 6000XPEG4 Electronics · EG4 Flex 18EG4 Electronics · EG4 Flex 21EG4 Electronics · EG4 GridBossCVEs relacionadas — EG4 12000XP
En el mismo producto, de las más peligrosas a las menos.
CVE-2025-46414CRITICALEG4 Electronics EG4 Inverters Improper Restriction of Excessive Authentication AttemptsEPSS 0.4%CVE-2025-53520HIGHEG4 Electronics EG4 Inverters Download of Code Without Integrity CheckEPSS 0.2%CVE-2025-52586HIGHEG4 Electronics EG4 Inverters Cleartext Transmission of Sensitive InformationEPSS 0.1%