Skip to content
OpenAdvisories

Vendor

Tigo Energy

3 known vulnerabilities.

Products

Cloud Connect Advanced 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2025-7769 Public exploit EPSS 23%

    Improper Neutralization of Special Elements used in a Command ('Command Injection') in Tigo Energy Cloud Connect Advanced

    Tigo Energy's CCA is vulnerable to a command injection vulnerability in the /cgi-bin/mobile_api endpoint when the DEVICE_PING command is called, allowing remote code execution due to improper handling of user input. When used with default credentials, this en…

    Tigo Energy Cloud Connect Advanced