VulnerabilityAnalyzed
CVE-2025-36744
SolarEdge SE3680H has unauthenticated disclosure of sensitive information during the bootloader loop.
LOW 2.4EPSS 0.16%
Does this matter?
Lower severity and a low EPSS score (0.16%). Track it; it rarely justifies an emergency change on its own.
Description
SolarEdge SE3680H has unauthenticated disclosure of sensitive information during the bootloader loop. While the device repeatedly initializes and waits for boot instructions, the bootloader emits diagnostic output this behavior can leak operating system information.
- CVSS 4.0
- 2.4 LOWCVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.16% probability · 6th percentile
- CISA KEV
- Not listed
- Affected
- solaredge/se3680h firmware
- Source
- csirt@divd.nl
References
- https://csirt.divd.nl/CVE-2025-36744Third Party Advisory
- https://csirt.divd.nl/DIVD-2025-00022/Broken Link
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.