SecuriTricks - CVE-2025-36744

Description

SolarEdge SE3680H has unauthenticated disclosure of sensitive information during the bootloader loop. While the device repeatedly initializes and waits for boot instructions, the bootloader emits diagnostic output this behavior can leak operating system information.

Product(s) Impacted

Vendor	Product	Versions
Solaredge	Se3680h Firmware Se3680h	* -

Weaknesses

Common security weaknesses mapped to this vulnerability.

*CPE(s)

Affected systems and software identified for this CVE.

Type	Vendor	Product	Version	Update	Edition	Language	Software Edition	Target Software	Target Hardware	Other Information
o	solaredge	se3680h_firmware	/	/	/	/	/	/	/	/
h	solaredge	se3680h	-	/	/	/	/	/	/	/

References

https://csirt.divd.nl/CVE-2025-36744

https://csirt.divd.nl/DIVD-2025-00022/

CVSS Score

2.4 / 10

CVSS Data - 4.0

Attack Vector: PHYSICAL
Attack Complexity: LOW
Attack Requirements: NONE
Privileges Required: NONE
User Interaction: NONE
Scope:
Confidentiality Impact: LOW
Integrity Impact: NONE
Availability Impact: NONE
Exploit Maturity: NOT_DEFINED

CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:X/R:X/V:X/RE:X/U:X

View Vector String

Timeline

Published: Dec. 12, 2025, 3:15 p.m.
Last Modified: Dec. 23, 2025, 5:20 p.m.

Status : Analyzed

CVE has had analysis completed and all data associations made.

More info

Source

csirt@divd.nl

CVE-2025-36744