SecuriTricks - CVE-2025-36745

Description

SolarEdge SE3680H ships with an outdated Linux kernel containing unpatched vulnerabilities in core subsystems. An attacker with network or local access can exploit these flaws to achieve remote code execution, privilege escalation, or disclosure of sensitive information.

Product(s) Impacted

Vendor	Product	Versions
Solaredge	Se3680h Firmware Se3680h	* -

Weaknesses

Common security weaknesses mapped to this vulnerability.

*CPE(s)

Affected systems and software identified for this CVE.

Type	Vendor	Product	Version	Update	Edition	Language	Software Edition	Target Software	Target Hardware	Other Information
o	solaredge	se3680h_firmware	/	/	/	/	/	/	/	/
h	solaredge	se3680h	-	/	/	/	/	/	/	/

References

https://csirt.divd.nl/CVE-2025-36745

https://csirt.divd.nl/DIVD-2025-00022/

CVSS Score

8.6 / 10

CVSS Data - 4.0

Attack Vector: PHYSICAL
Attack Complexity: LOW
Attack Requirements: NONE
Privileges Required: NONE
User Interaction: NONE
Scope:
Confidentiality Impact: HIGH
Integrity Impact: HIGH
Availability Impact: HIGH
Exploit Maturity: NOT_DEFINED

CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:X/R:X/V:D/RE:X/U:X

View Vector String

Timeline

Published: Dec. 12, 2025, 3:15 p.m.
Last Modified: Dec. 23, 2025, 5:21 p.m.

Status : Analyzed

CVE has had analysis completed and all data associations made.

More info

Source

csirt@divd.nl

CVE-2025-36745