CVE-2025-36745

CVE-2025-36745

High · published December 12, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
13.1
In the wild
Unconfirmed
What it is

⚡ An outdated Linux kernel in the SolarEdge SE3680H is like an unlocked backdoor in your house—easy for attackers with access to stroll right in and take control! 🔥 Picture this: the solar inverter is your house, and the Linux kernel is the front door. If that door has an old, rusty lock and a mischievous neighbor knows about it, they can waltz in without a care in the world—gaining access to everything inside! An attacker could exploit these vulnerabilities to remotely execute malicious code, escalate their privileges, or even disclose sensitive information, which is absolutely devastating. With control over the device, they could manipulate settings or access your network, leading to potential chaos and loss of data!

Put simply

Picture this: the solar inverter is your house, and the Linux kernel is the front door. If that door has an old, rusty lock and a mischievous neighbor knows about it, they can waltz in without a care in the world—gaining access to everything inside! This vulnerability arises from unpatched flaws in the core subsystems of the SolarEdge SE3680H's outdated Linux kernel. Both network and local access can allow attackers to trigger these security weaknesses, enabling them to execute code or gain higher privileges.

What to do

An attacker could exploit these vulnerabilities to remotely execute malicious code, escalate their privileges, or even disclose sensitive information, which is absolutely devastating. With control over the device, they could manipulate settings or access your network, leading to potential chaos and loss of data! To mitigate this risk, update the Linux kernel to the latest version provided by SolarEdge immediately. Regularly audit your devices and ensure they are configured securely to minimize potential exposure. Don't forget to monitor your network for any suspicious activity! You've got this! By acting quickly, you can lock down your system and keep those pesky intruders out! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00230 · 13.1th percentile
Published
2025-12-12T20:15Z
Affected products (1)
ProductVersionsFixed in
solaredge/se3680h_firmware≥ 4.0, < 4.224.22
References (2)
EPSS history
Timeline
  • 12 DEC 15:05Z
    SolarEdge SE3680H contains Linux Kernel vulnerabilities
    cvelistv5