Eg4 Electronics Eg4 Flex 21
4 CVEs affecting Eg4 Electronics Eg4 Flex 21. Latest disclosed: 2025-08-08. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-53520 | High | 8.8 | 2025-08-08 | The affected product allows firmware updates to be downloaded from EG4's website, transferred via USB dongles, or installed through EG4's Monitoring Center (… |
CVE-2025-46414 | High | 8.1 | 2025-08-08 | The affected product does not limit the number of attempts for inputting the correct PIN for a registered product, which may allow an attacker to gain unauth… |
CVE-2025-52586 | Medium | 6.9 | 2025-08-08 | The MOD3 command traffic between the monitoring application and the inverter is transmitted in plaintext without encryption or obfuscation. This vulnerabilit… |
CVE-2025-47872 | Medium | 5.8 | 2025-08-08 | The public-facing product registration endpoint server responds differently depending on whether the S/N is valid and unregistered, valid but already registe… |