PT-2025-32226 · Tigo Energy · Cloud Connect Advanced

Anthony Rose + 2 · Published 2025-08-05 · Updated 2025-08-06 · CVE-2025-7768

Positive Technologies (AI Summary)

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Tigo Energy Cloud Connect Advanced (CCA) (affected versions not specified)

Description Tigo Energy's Cloud Connect Advanced (CCA) device contains hard-coded credentials that allow unauthorized users to gain administrative access. This allows attackers to escalate privileges and take full control of the device, potentially modifying system settings, disrupting solar energy production, and interfering with safety mechanisms.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

BDU:2025-09580

CVE-2025-7768

Affected Products

Cloud Connect Advanced

References · 7

• https://bdu.fstec.ru/vul/2025-09580 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-7768 · Security Note
• https://twitter.com/CveFindCom/status/1953194771339522067 · Twitter Post
• https://cisa.gov/news-events/ics-advisories/icsa-25-217-02 · Note
• https://tigoenergy.com/product/cloud-connect-advanced · Note
• https://twitter.com/CVEnew/status/1953195906653938154 · Twitter Post
• https://t.me/CVEtracker/29399 · Telegram Post