CVE-2025-7768CWE-798

Use of Hard-coded Credentials in Tigo Energy Cloud Connect Advanced

Critical · published August 6, 2025

CVSS v4.0
9.3
EPSS
1%
Percentile
45.7
In the wild
Unconfirmed
What it is

Tigo Energy's Cloud Connect Advanced (CCA) device contains hard-coded credentials that allow unauthorized users to gain administrative access. This vulnerability enables attackers to escalate privileges and take full control of the device, potentially modifying system settings, disrupting solar energy production, and interfering with safety mechanisms.

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00557 · 45.7th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2025-08-06T20:28Z
EPSS history
Timeline
  • 06 AUG 20:28Z
    Use of Hard-coded Credentials in Tigo Energy Cloud Connect Advanced
    cvelistv5