CVE-2025-7768criticalCWE-798

CVE-2025-7768: fallo crítico en Tigo Energy Cloud Connect Advanced

Use of Hard-coded Credentials in Tigo Energy Cloud Connect Advanced

Publicada el

Seguir esta CVE+ Monitorear Cloud Connect Advanced

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 9.3epss 0.6%
Tigo Energy's Cloud Connect Advanced (CCA) device contains hard-coded credentials that allow unauthorized users to gain administrative access. This vulnerability enables attackers to escalate privileges and take full control of the device, potentially modifying system settings, disrupting solar energy production, and interfering with safety mechanisms.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
Tigo Energy · Cloud Connect Advanced
CVEs relacionadas — Tigo Energy Cloud Connect Advanced

En el mismo producto, de las más peligrosas a las menos.

CVE-2025-7769HIGHImproper Neutralization of Special Elements used in a Command ('Command Injection') in Tigo Energy Cloud Connect AdvancedEPSS 23.0%CVE-2025-7770HIGHPredictable Seed in Pseudo-Random Number Generator (PRNG) in Tigo Energy Cloud Connect AdvancedEPSS 0.6%