CVE-2025-52586
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
Summary
The MOD3 command traffic between the monitoring application and the inverter is transmitted in plaintext without encryption or obfuscation. This vulnerability may allow an attacker with access to a local network to intercept, manipulate, replay, or forge critical data, including read/write operations for voltage, current, and power configuration, operational status, alarms, telemetry, system reset, or inverter control commands, potentially disrupting power generation or reconfiguring inverter settings.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| EG4 Electronics | EG4 12kPV | all versions | affected |
| EG4 Electronics | EG4 18kPV | all versions | affected |
| EG4 Electronics | EG4 Flex 21 | all versions | affected |
| EG4 Electronics | EG4 Flex 18 | all versions | affected |
| EG4 Electronics | EG4 6000XP | all versions | affected |
| EG4 Electronics | EG4 12000XP | all versions | affected |
| EG4 Electronics | EG4 GridBoss | all versions | affected |
Weaknesses
- CWE-319: CWE-319
Workarounds
EG4 has acknowledged the vulnerabilities and is actively working on a fix, including new hardware expected to release by October 15, 2025. Until then, EG4 will actively monitor all installed systems and work with affected users on a case-by-case basis if anomalies are observed.
For more information, contact EG4. https://eg4electronics.com/contact/
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-219-07
- https://eg4electronics.com/contact/
- https://eg4electronics.com/wp-content/uploads/2025/09/EG4-Wi-Fi-Dongle-Dongle-Firmware-Update.pdf
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.