CVE-2025-52586 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

The MOD3 command traffic between the monitoring application and the inverter is transmitted in plaintext without encryption or obfuscation. This vulnerability…
High CVSS: 7.5

CVE-2025-52586

The MOD3 command traffic between the monitoring application and the
inverter is transmitted in plaintext without encryption or obfuscation.
This vulnerability may allow an attacker with access to a local network
to intercept, manipulate, replay, or forge critical data, including
read/write operations for voltage, current, and power configuration,
operational status, alarms, telemetry, system reset, or inverter control
commands, potentially disrupting power generation or reconfiguring
inverter settings.
Vendor
-
Product
-
CWE
CWE-319
Yayın Tarihi
2025-08-08 16:15:27
Güncelleme
2025-09-08 17:15:34
Source Identifier
ics-cert@hq.dhs.gov
KEV Date Added
-

Kategoriler

Referanslar