PT-2025-7065 · Outback Power · Mojave Inverter

Jon Hurtado · Published 2025-02-13 · Updated 2025-02-17 · CVE-2025-25281

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Outback Power - Mojave Inverter versions all

Description: An attacker may modify the URL to discover sensitive information about the target network.

Recommendations: For all versions, consider restricting access to sensitive network information as a temporary workaround until a patch is available.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2025-25281

Affected Products

Mojave Inverter

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-25281 · Security Note
• https://cisa.gov/news-events/ics-advisories/icsa-25-044-17 · Note
• https://old.outbackpower.com/about-outback/contact/contact-us · Note
• https://twitter.com/syedaquib77/status/1890322382281478556 · Twitter Post
• https://twitter.com/CVEnew/status/1890156642240766385 · Twitter Post
• https://twitter.com/CveFindCom/status/1890151744388087830 · Twitter Post
• https://twitter.com/cybercronai/status/1891314220538491095 · Twitter Post