CVE-2025-7768

9.3 criticalEPSS 0.6%

Critical (9.3). EPSS 0.6% chance of exploitation in the next 30 days.

Tigo Energy's Cloud Connect Advanced (CCA) device contains hard-coded credentials that allow unauthorized users to gain administrative access. This vulnerability enables attackers to escalate privileges and take full control of the device, potentially modifying system settings, disrupting solar energy production, and interfering with safety mechanisms.

Severity

CVSS 4.0

9.3 critical

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
CWE: CWE-798
Published: 2025-08-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-217-02

Check your stack JSON