ByteOS Network

CVE Vulnerability Details :

CVE-2025-7768

PUBLISHED

More Info Official Page

Assigner-icscert

Assigner Org ID-7d14cffa-0d7d-4270-9dc0-52cabd5a23a6

Published At-06 Aug, 2025 | 20:28

Updated At-06 Aug, 2025 | 20:41

▼CVE Numbering Authority (CNA)

Use of Hard-coded Credentials in Tigo Energy Cloud Connect Advanced

Tigo Energy's Cloud Connect Advanced (CCA) device contains hard-coded credentials that allow unauthorized users to gain administrative access. This vulnerability enables attackers to escalate privileges and take full control of the device, potentially modifying system settings, disrupting solar energy production, and interfering with safety mechanisms.

Affected Products

Vendor

Tigo Energy

Product

Cloud Connect Advanced

Default Status

unaffected

Versions

Affected

From 0 through 4.0.1 (custom)

Problem Types

Type	CWE ID	Description
CWE	CWE-798	CWE-798 Use of Hard-coded Credentials

Metrics

Version	Base score	Base severity	Vector
4.0	9.3	CRITICAL	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Workarounds

Tigo Energy is aware of these vulnerabilities and is actively working on a fix to address them. Visit Tigo Energy's Help Center https://support.tigoenergy.com/hc/en-us for more specific security recommendations.

Credits

reporter

Anthony Rose and Jacob Krasnov of BC Security and Peter Kariuki of Ovanova

References

Hyperlink	Resource
https://www.cisa.gov/news-events/ics-advisories/icsa-25-217-02	government-resource

▼Authorized Data Publishers (ADP)

CISA ADP Vulnrichment

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References