CVE-2025-36744: SolarEdge SE3680H - Information Exposure during Bootloader Loop
SolarEdge SE3680H has unauthenticated disclosure of sensitive information during the bootloader loop. While the device repeatedly initializes and waits for boot instructions, the bootloader emits diagnostic output this behavior can leak operating system information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-36744?
CVE-2025-36744 has a high severity level due to the potential for unauthorized access to sensitive system information.
How do I fix CVE-2025-36744?
To mitigate CVE-2025-36744, ensure that firmware for the SolarEdge SE3680H is updated to the latest version addressing this vulnerability.
What information is disclosed due to CVE-2025-36744?
CVE-2025-36744 allows for the unauthenticated disclosure of sensitive operating system information during the bootloader initialization process.
Who is affected by CVE-2025-36744?
The vulnerability CVE-2025-36744 specifically affects users of SolarEdge SE3680H devices.
Is CVE-2025-36744 easy to exploit?
Yes, CVE-2025-36744 can be exploited easily by an attacker with network access to the affected device.