CVE-2025-36743

CVE-2025-36743

Medium · published December 12, 2025

CVSS v3.1
6.8
EPSS
0%
Percentile
11.9
In the wild
Unconfirmed
What it is

SolarEdge SE3680H has an exposed debug/test interface accessible to unauthenticated actors, allowing disclosure of system internals and execution of debug commands.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00220 · 11.9th percentile
Published
2025-12-12T20:15Z
Affected products (1)
ProductVersionsFixed in
solaredge/se3680h_firmware≥ 4.0, < 4.224.22
References (2)
https://csirt.divd.nl/CVE-2025-36743 · [email protected]https://csirt.divd.nl/DIVD-2025-00022/ · [email protected]
EPSS history
Timeline
  • 12 DEC 15:05Z
    SolarEdge SE3680H - Exposed Debug interface
    cvelistv5