Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9mwr-2fgp-xxq7

Опубликовано: 06 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 9.3

Описание

Tigo Energy's Cloud Connect Advanced (CCA) device contains hard-coded credentials that allow unauthorized users to gain administrative access. This vulnerability enables attackers to escalate privileges and take full control of the device, potentially modifying system settings, disrupting solar energy production, and interfering with safety mechanisms.

Tigo Energy's Cloud Connect Advanced (CCA) device contains hard-coded credentials that allow unauthorized users to gain administrative access. This vulnerability enables attackers to escalate privileges and take full control of the device, potentially modifying system settings, disrupting solar energy production, and interfering with safety mechanisms.

EPSS

Процентиль: 18%
0.00058
Низкий

9.3 Critical

CVSS4

Дефекты

CWE-798

Связанные уязвимости

nvd
6 месяцев назад

Tigo Energy's Cloud Connect Advanced (CCA) device contains hard-coded credentials that allow unauthorized users to gain administrative access. This vulnerability enables attackers to escalate privileges and take full control of the device, potentially modifying system settings, disrupting solar energy production, and interfering with safety mechanisms.

CVSS3: 9.8
fstec
6 месяцев назад

Уязвимость средства мониторинга и управления солнечными энергетическими системами Tigo Cloud Connect Advanced (CCA), связанная с использованием жестко закодированных учетных данных, позволяющая нарушителю обойти ограничения безопасности, повысить свои привилегии и получить полный контроль над устройством

EPSS

Процентиль: 18%
0.00058
Низкий

9.3 Critical

CVSS4

Дефекты

CWE-798