Critical severityNVD Advisory· Published Aug 6, 2025· Updated Apr 15, 2026

CVE-2025-7768

Description

Tigo Energy's Cloud Connect Advanced (CCA) device contains hard-coded credentials that allow unauthorized users to gain administrative access. This vulnerability enables attackers to escalate privileges and take full control of the device, potentially modifying system settings, disrupting solar energy production, and interfering with safety mechanisms.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Tigo Energy/Cloud Connect Advancedllm-create

Patches

Vulnerability mechanics

References

www.cisa.gov/news-events/ics-advisories/icsa-25-217-02nvd

News mentions

No linked articles in our index yet.

cvss	0.585
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000