CVE-2025-52586 | BDVDB-2026-288901 Detail

Description#

The MOD3 command traffic between the monitoring application and the inverter is transmitted in plaintext without encryption or obfuscation. This vulnerability may allow an attacker with access to a local network to intercept, manipulate, replay, or forge critical data, including read/write operations for voltage, current, and power configuration, operational status, alarms, telemetry, system reset, or inverter control commands, potentially disrupting power generation or reconfiguring inverter settings.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12025-08-08Record published in the CVE List.
2. Version 22025-09-08Most recent update recorded in the CVE List.