Predictable Seed in Pseudo-Random Number Generator (PRNG) in Tigo Energy Cloud Connect Advanced
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA.
Summary
Tigo Energy's CCA device is vulnerable to insecure session ID generation in their remote API. The session IDs are generated using a predictable method based on the current timestamp, allowing attackers to recreate valid session IDs. When combined with the ability to circumvent session ID requirements for certain commands, this enables unauthorized access to sensitive device functions on connected solar optimization systems.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Tigo Energy | Cloud Connect Advanced | up to 4.0.1 | — | No fix listed | CNA |
- Cloud Connect Advanced VendorTigo Energy Affected up to 4.0.1 Fixed in — No fix listed CNA
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2025-7770
- 2026-10-03 Alias added: GHSA-gjpw-wr3x-q236
References
More Tigo Energy vulnerabilities
- TI-2025-07094 Command injection in Tigo Energy Cloud Connect Advanced CVSS 4.0HIGH 8.7
- TI-2025-07093 Use of Hard-coded Credentials in Tigo Energy Cloud Connect Advanced CVSS 4.0CRITICAL 9.3
Sources
- CVE-2025-7770 · CVE Program
- CVE-2025-7770 · NVD
- FIRST EPSS
- GHSA-gjpw-wr3x-q236 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences