Low severity2.4NVD Advisory· Published Dec 12, 2025· Updated Jun 17, 2026

CVE-2025-36744

Description

SolarEdge SE3680H has unauthenticated disclosure of sensitive information during the bootloader loop. While the device repeatedly initializes and waits for boot instructions, the bootloader emits diagnostic output this behavior can leak operating system information.

Affected products

Solaredge/Se3680h Firmware
cpe:2.3:o:solaredge:se3680h_firmware:*:*:*:*:*:*:*:*
Range: >=4.0,<4.22
Solaredge/SE3680Hllm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 4.0

Patches

Vulnerability mechanics

References

csirt.divd.nl/CVE-2025-36744nvdThird Party Advisory
csirt.divd.nl/DIVD-2025-00022/nvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.156
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000