Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Tigo Energy Clear all filters
TI-2025-07094 CVE-2025-7769 · GHSA-crj2-hw3j-xqwx

Command injection in Tigo Energy Cloud Connect Advanced

Priority MEDIUM 60

Tigo Energy's CCA is vulnerable to a command injection vulnerability in the /cgi-bin/mobile_api endpoint when the DEVICE_PING command is called, allowing remote code execution due to improper handling of user input.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.23036 Published 2025-08-06 No fix listed CWE-77
TI-2025-07093 CVE-2025-7768 · GHSA-9mwr-2fgp-xxq7

Use of Hard-coded Credentials in Tigo Energy Cloud Connect Advanced

Priority MEDIUM 43

Tigo Energy's Cloud Connect Advanced (CCA) device contains hard-coded credentials that allow unauthorized users to gain administrative access.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00632 Published 2025-08-06 No fix listed CWE-798