CVE Catalog

CVE-2025-36744

LowCVSS 2.4
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.16%

5th percentile - higher than 5% of all known CVEs

Summary

SolarEdge SE3680H has unauthenticated disclosure of sensitive information during the bootloader loop. While the device repeatedly initializes and waits for boot instructions, the bootloader emits diagnostic output this behavior can leak operating system information.

Risk Assessment

Risk of exposing operating system information, which may facilitate attacks on the device.

Recommendation

It is recommended to monitor the device, restrict access, and check for available firmware updates.

Other vulnerabilities in SolarEdge SE3680H

Original NVD description (English source)

SolarEdge SE3680H has unauthenticated disclosure of sensitive information during the bootloader loop. While the device repeatedly initializes and waits for boot instructions, the bootloader emits diagnostic output this behavior can leak operating system information.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS