CVE-2025-53520CWE-494

EG4 Electronics EG4 Inverters Download of Code Without Integrity Check

High · published August 8, 2025

CVSS v4.0
8.6
EPSS
0%
Percentile
10.8
In the wild
Unconfirmed
What it is

The affected product allows firmware updates to be downloaded from EG4's

website, transferred via USB dongles, or installed through EG4's

Monitoring Center (remote, cloud-connected interface) or via a serial

connection, and can install these files without integrity checks. The

TTComp archive format used for the firmware is unencrypted and can be

unpacked and altered without detection.

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00211 · 10.8th percentile
Weakness
CWE-494 · Download of Code Without Integrity Check
Published
2025-08-08T16:09Z
EPSS history
Timeline
  • 08 AUG 16:09Z
    EG4 Electronics EG4 Inverters Download of Code Without Integrity Check
    cvelistv5