Vendors / Tigo Energy Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 2
Exploited now Tigo Energy records in CISA KEV No Tigo Energy vulnerabilities are listed in CISA KEV.
Priority MEDIUM 60
Tigo Energy's CCA is vulnerable to a command injection vulnerability in the /cgi-bin/mobile_api endpoint when the DEVICE_PING command is called, allowing remote code execution due to improper handling of user input.
CVSS 4.0 HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.23036 · Published 2025-08-06 · No fix listed CWE-77
Priority MEDIUM 43
Tigo Energy's Cloud Connect Advanced (CCA) device contains hard-coded credentials that allow unauthorized users to gain administrative access.
CVSS 4.0 CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00632 · Published 2025-08-06 · No fix listed CWE-798
Priority MEDIUM 41
Tigo Energy's CCA device is vulnerable to insecure session ID generation in their remote API.
CVSS 4.0 HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00609 · Published 2025-08-06 · No fix listed CWE-337
Open these records in search → All records by CVSS severity
1 2 0 0 0
