Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9mwr-2fgp-xxq7

Опубликовано: 06 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 9.3

Описание

Tigo Energy's Cloud Connect Advanced (CCA) device contains hard-coded credentials that allow unauthorized users to gain administrative access. This vulnerability enables attackers to escalate privileges and take full control of the device, potentially modifying system settings, disrupting solar energy production, and interfering with safety mechanisms.

Tigo Energy's Cloud Connect Advanced (CCA) device contains hard-coded credentials that allow unauthorized users to gain administrative access. This vulnerability enables attackers to escalate privileges and take full control of the device, potentially modifying system settings, disrupting solar energy production, and interfering with safety mechanisms.

EPSS

Процентиль: 18%
0.00059
Низкий

9.3 Critical

CVSS4

Дефекты

CWE-798

Связанные уязвимости

nvd
около 1 месяца назад

Tigo Energy's Cloud Connect Advanced (CCA) device contains hard-coded credentials that allow unauthorized users to gain administrative access. This vulnerability enables attackers to escalate privileges and take full control of the device, potentially modifying system settings, disrupting solar energy production, and interfering with safety mechanisms.

CVSS3: 9.8
fstec
около 1 месяца назад

Уязвимость средства мониторинга и управления солнечными энергетическими системами Tigo Cloud Connect Advanced (CCA), связанная с использованием жестко закодированных учетных данных, позволяющая нарушителю обойти ограничения безопасности, повысить свои привилегии и получить полный контроль над устройством

EPSS

Процентиль: 18%
0.00059
Низкий

9.3 Critical

CVSS4

Дефекты

CWE-798