CVE-2025-36743

MediumCVSS 6.8

Published: 12/12/2025(UTC)Updated: 07/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

12th percentile - higher than 12% of all known CVEs

Summary

SolarEdge SE3680H has an exposed debug/test interface accessible to unauthenticated actors, allowing disclosure of system internals and execution of debug commands.

Risk Assessment

An unauthenticated attacker may obtain information about the system's internals and execute debug commands, potentially leading to further compromise of the device.

Recommendation

Restrict access to the debug/test interface through authentication and network access controls, and disable it if possible.

Other vulnerabilities in SolarEdge SE3680H

CVE-2025-36744Low
SolarEdge SE3680H has unauthenticated disclosure of sensitive information during the bootloader loop. While the device repeatedly initializes and waits for boot instructions, the bootloader emits diagnostic output this behavior can leak operating system information.

Original NVD description (English source)

SolarEdge SE3680H has an exposed debug/test interface accessible to unauthenticated actors, allowing disclosure of system internals and execution of debug commands.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS