BaseFortify

Publication date: 2025-12-12

Last updated on: 2025-12-23

Assigner: Dutch Institute for Vulnerability Disclosure

Description

SolarEdge SE3680H has an exposed debug/test interface accessible to unauthenticated actors, allowing disclosure of system internals and execution of debug commands.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-12

Last Modified

2025-12-23

Generated

2026-07-06

AI Q&A

2025-12-12

EPSS Evaluated

2026-07-05

NVD

CVE-2025-36743

Affected Vendors & Products

Vendor	Product	Version / Range
solaredge	se3680h_firmware	From 4.0 (inc) to 4.22 (exc)
solaredge	se3680h	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-NVD-CWE-Other

Attack-Flow Graph

Executive Summary

The vulnerability in SolarEdge SE3680H involves an exposed debug/test interface that can be accessed by unauthenticated actors. This exposure allows attackers to disclose system internals and execute debug commands on the device.

Impact Analysis

This vulnerability can lead to unauthorized disclosure of sensitive system information and allow attackers to execute debug commands, potentially compromising the device's integrity, availability, and confidentiality.

Hi! I’m here to help you understand CVE-2025-36743. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70