Description
The affected product allows firmware updates to be downloaded from EG4's
website, transferred via USB dongles, or installed through EG4's
Monitoring Center (remote, cloud-connected interface) or via a serial
connection, and can install these files without integrity checks. The
TTComp archive format used for the firmware is unencrypted and can be
unpacked and altered without detection.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| EG4 Electronics | EG4 12kPV | all versions | — |
| EG4 Electronics | EG4 18kPV | all versions | — |
| EG4 Electronics | EG4 Flex 21 | all versions | — |
| EG4 Electronics | EG4 Flex 18 | all versions | — |
| EG4 Electronics | EG4 6000XP | all versions | — |
| EG4 Electronics | EG4 12000XP | all versions | — |
| EG4 Electronics | EG4 GridBoss | all versions | — |
Advisories 1
- ICSA-25-219-07 EG4 Electronics EG4 Inverters (Update B) CISA ICS & IT advisories · Sep 9, 2025