CVE-2025-36744

CVE-2025-36744

Low · published December 12, 2025

CVSS v3.1
2.4
EPSS
0%
Percentile
5.1
In the wild
Unconfirmed
What it is

SolarEdge SE3680H has unauthenticated disclosure of sensitive information during the bootloader loop. While the device repeatedly initializes and waits for boot instructions, the bootloader emits diagnostic output this behavior can leak operating system information.

The record
Technical detail
CVSS v3.1
2.4 · LOW
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00162 · 5.1th percentile
Published
2025-12-12T20:15Z
Affected products (1)
ProductVersionsFixed in
solaredge/se3680h_firmware≥ 4.0, < 4.224.22
References (2)
https://csirt.divd.nl/DIVD-2025-00022/ · [email protected]https://csirt.divd.nl/CVE-2025-36744 · [email protected]
EPSS history
Timeline
  • 12 DEC 15:05Z
    SolarEdge SE3680H - Information Exposure during Bootloader Loop
    cvelistv5