CVE-2025-7768criticalCWE-798

CVE-2025-7768: falha crítica em Tigo Energy Cloud Connect Advanced

Use of Hard-coded Credentials in Tigo Energy Cloud Connect Advanced

Publicada em

Seguir esta CVE+ Monitorar Cloud Connect Advanced

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.3epss 0.6%
Tigo Energy's Cloud Connect Advanced (CCA) device contains hard-coded credentials that allow unauthorized users to gain administrative access. This vulnerability enables attackers to escalate privileges and take full control of the device, potentially modifying system settings, disrupting solar energy production, and interfering with safety mechanisms.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Tigo Energy · Cloud Connect Advanced
CVEs relacionadas — Tigo Energy Cloud Connect Advanced

No mesmo produto, das mais perigosas para as menos.

CVE-2025-7769HIGHImproper Neutralization of Special Elements used in a Command ('Command Injection') in Tigo Energy Cloud Connect AdvancedEPSS 23.0%CVE-2025-7770HIGHPredictable Seed in Pseudo-Random Number Generator (PRNG) in Tigo Energy Cloud Connect AdvancedEPSS 0.6%