VULNERABILITY INTELLIGENCE
CVE-2025-36744
CVSS score2.4 LOW
EPSS probability0.16%
CISA KEVNot currently listed
Published2025-12-12
Last modified2026-10-07
CVSS vectorCVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/S:N
Description
SolarEdge SE3680H has unauthenticated disclosure of sensitive information during the bootloader loop. While the device repeatedly initializes and waits for boot instructions, the bootloader emits diagnostic output this behavior can leak operating system information.
Primary references
- csirt@divd.nl — Third Party Advisory
- csirt@divd.nl — Broken Link