BaseFortify

Publication date: 2025-12-12

Last updated on: 2026-04-29

Assigner: Dutch Institute for Vulnerability Disclosure

Description

SolarEdge SE3680H ships with an outdated Linux kernel containing unpatched vulnerabilities in core subsystems. An attacker with network or local access can exploit these flaws to achieve remote code execution, privilege escalation, or disclosure of sensitive information.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-12

Last Modified

2026-04-29

Generated

2026-07-06

AI Q&A

2025-12-12

EPSS Evaluated

2026-07-05

NVD

CVE-2025-36745

Affected Vendors & Products

Vendor	Product	Version / Range
solaredge	se3680h_firmware	From 4.0 (inc) to 4.22 (exc)
solaredge	se3680h	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-NVD-CWE-noinfo

Attack-Flow Graph

Executive Summary

This vulnerability affects the SolarEdge SE3680H device, which ships with an outdated Linux kernel containing unpatched vulnerabilities in its core subsystems. An attacker with network or local access can exploit these flaws to perform remote code execution, escalate privileges, or disclose sensitive information.

Impact Analysis

The impact of this vulnerability includes the potential for an attacker to execute arbitrary code remotely, gain higher privileges on the device, or access sensitive information. This can lead to unauthorized control over the device, data breaches, and compromise of system integrity.

Hi! I’m here to help you understand CVE-2025-36745. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70