Tigo Energy Cloud Connect Advanced
3 CVEs affecting Tigo Energy Cloud Connect Advanced. Latest disclosed: 2025-08-06. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-7770 | | 2025-08-06 | Tigo Energy's CCA device is vulnerable to insecure session ID generation in their remote API. The session IDs are generated using a predictable method based on… | |
CVE-2025-7769 | | 2025-08-06 | Tigo Energy's CCA is vulnerable to a command injection vulnerability in the /cgi-bin/mobile_api endpoint when the DEVICE_PING command is called, allowing remot… | |
CVE-2025-7768 | | 2025-08-06 | Tigo Energy's Cloud Connect Advanced (CCA) device contains hard-coded credentials that allow unauthorized users to gain administrative access. This vulnerabili… |