Tigo Energy Cloud Connect Advanced (Update A)

Risk Summary

Successful exploitation of these vulnerabilities could allow attackers to gain unauthorized administrative access using hard-coded credentials, escalate privileges to take full control of the device, modify system settings, disrupt solar energy production, interfere with safety mechanisms, execute arbitrary commands via command injection, cause service disruptions, expose sensitive data, and recreate valid session IDs to access sensitive device functions on connected solar inverter systems due to insecure session ID generation.

CVEs (3)

Remediations

• Tigo Energy is aware of these vulnerabilities and is actively working on a fix to address them.
• Visit Tigo Energy's Help Center for more specific security recommendations.

Affected Vendors

Affected Products (1)

Affected Sectors

Energy