CVE-2025-52586highCWE-319

CVE-2025-52586: falha de alta gravidade em EG4 12000XP

EG4 Electronics EG4 Inverters Cleartext Transmission of Sensitive Information

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar EG4 12000XP+ Monitorar EG4 12kPV

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 0.1%
The MOD3 command traffic between the monitoring application and the inverter is transmitted in plaintext without encryption or obfuscation. This vulnerability may allow an attacker with access to a local network to intercept, manipulate, replay, or forge critical data, including read/write operations for voltage, current, and power configuration, operational status, alarms, telemetry, system reset, or inverter control commands, potentially disrupting power generation or reconfiguring inverter settings.
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
Produtos afetados
EG4 Electronics · EG4 12000XPEG4 Electronics · EG4 12kPVEG4 Electronics · EG4 18kPVEG4 Electronics · EG4 6000XPEG4 Electronics · EG4 Flex 18EG4 Electronics · EG4 Flex 21EG4 Electronics · EG4 GridBoss
CVEs relacionadas — EG4 12000XP

No mesmo produto, das mais perigosas para as menos.

CVE-2025-46414CRITICALEG4 Electronics EG4 Inverters Improper Restriction of Excessive Authentication AttemptsEPSS 0.4%CVE-2025-47872MEDIUMEG4 Electronics EG4 Inverters Observable DiscrepancyEPSS 0.3%CVE-2025-53520HIGHEG4 Electronics EG4 Inverters Download of Code Without Integrity CheckEPSS 0.2%