PT-2025-50935 · Solaredge · Solaredge Se3680H

Alexandros Tokatlis + 1 · Published 2025-12-12 · Updated 2025-12-12 · CVE-2025-36744

Positive Technologies (AI Summary)

CVSS v4.0

2.4

Low

Base vector

AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/S:N

Name of the Vulnerable Software and Affected Versions SolarEdge SE3680H (affected versions not specified)

Description The SolarEdge SE3680H device exhibits an unauthenticated disclosure of sensitive information during the bootloader loop. During device initialization and while awaiting boot instructions, the bootloader emits diagnostic output, potentially revealing operating system information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2025-36744

Affected Products

Solaredge Se3680H

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-36744 · Security Note
• https://osv.dev/vulnerability/CVE-2025-36744 · Vendor Advisory
• https://csirt.divd.nl/CVE-2025-36744 · Note
• https://twitter.com/VulmonFeeds/status/1999570328448557247 · Twitter Post
• https://csirt.divd.nl/DIVD-2025-00022 · Note
• https://t.me/CVEtracker/39622 · Telegram Post