Credential Exposure in Charge Controller by XYZ Vendor
CVE-2025-41682
8.8HIGH
What is CVE-2025-41682?
An authenticated, low-privileged attacker can exploit this vulnerability to gain access to sensitive credentials stored within the charge controller. The exposure of the manufacturer password poses significant security risks, enabling potential unauthorized actions against affected systems. It is crucial for users to understand the possible implications and take necessary measures to secure their devices against such vulnerabilities.
Affected Version(s)
CC612 5.30.2 < 5.33.3
CC613 5.30.2 < 5.33.3
ICC13xx 5.30.2 < 5.33.3
References
CVSS V3.1
Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Dr. Matthias Kesenheimer by SySS GmbH
Sebastian Hamann by SySS GmbH