{"id":"CVE-2025-36744","url":"https://www.cyber-defence.io/tools/cve/CVE-2025-36744","generatedAt":"2026-10-28T03:23:25.912Z","title":"SolarEdge SE3680H has unauthenticated disclosure of sensitive information during the bootloader loop.","description":"SolarEdge SE3680H has unauthenticated disclosure of sensitive information during the bootloader loop. While the device repeatedly initializes and waits for boot instructions, the bootloader emits diagnostic output this behavior can leak operating system information.","published":"2025-12-12T15:15:53.000Z","lastModified":"2026-10-07T20:10:02.000Z","status":"Analyzed","sourceIdentifier":"csirt@divd.nl","cvss":{"version":"4.0","score":2.4,"severity":"LOW","vector":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":[],"affected":["solaredge/se3680h firmware"],"epss":{"score":0.00162,"percentile":0.05374,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.16%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://csirt.divd.nl/CVE-2025-36744","tags":["Third Party Advisory"],"source":"csirt@divd.nl"},{"url":"https://csirt.divd.nl/DIVD-2025-00022/","tags":["Broken Link"],"source":"csirt@divd.nl"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-36744","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}