CVE-2025-36744
BaseFortify
Publication date: 2025-12-12
Last updated on: 2025-12-23
Assigner: Dutch Institute for Vulnerability Disclosure
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| solaredge | se3680h_firmware | From 4.0 (inc) to 4.22 (exc) |
| solaredge | se3680h | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-NVD-CWE-Other |
Attack-Flow Graph
AI Powered Q&A
How can this vulnerability impact me? :
The vulnerability can lead to the leakage of sensitive operating system information without authentication. This information disclosure could potentially aid attackers in understanding the device's environment, which might be used to craft targeted attacks or exploit other vulnerabilities.
Can you explain this vulnerability to me?
This vulnerability involves the SolarEdge SE3680H device's bootloader emitting diagnostic output during its bootloader loop without requiring authentication. This behavior can lead to the unauthenticated disclosure of sensitive information, specifically operating system details, while the device repeatedly initializes and waits for boot instructions.