CVE-2025-36744

SolarEdge SE3680H has unauthenticated disclosure of sensitive information during the bootloader loop. While the device repeatedly initializes and waits for boot instructions, the bootloader emits diagnostic output this behavior can leak operating system information.

CVSS 4.0

2.4CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/S:N

CVSS 3.1

2.4CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

0.2% chance of exploitation in the next 30 days; higher than 5% of CVEs (scores of 2026-10-25)

Published

2025-12-12

Modified

2026-10-07

Record from

the NVD, synced 2026-10-19

Affected

• solaredge:se3680h_firmware

References

• https://csirt.divd.nl/CVE-2025-36744
• https://csirt.divd.nl/DIVD-2025-00022/

Check your stackJSON