Export limit exceeded: 36461 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2025-46414

EG4 Electronics EG4 Inverters Improper Restriction of Excessive Authentication Attempts

The affected product does not limit the number of attempts for inputting the correct PIN for a registered product, which may allow an attacker to gain unauthorized access using brute-force methods if they possess a valid device serial number. The API provides clear feedback when the correct PIN is entered. This vulnerability was patched in a server-side update on April 6, 2025.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed
Vendors
Eg4 Electronics
Products
Eg4 12000xp Eg4 12kpv Eg4 18kpv and 4 more
CVE-2025-47872

EG4 Electronics EG4 Inverters Observable Discrepancy

The public-facing product registration endpoint server responds differently depending on whether the S/N is valid and unregistered, valid but already registered, or does not exist in the database. Combined with the fact that serial numbers are sequentially assigned, this allows an attacker to gain information on the product registration status of different S/Ns.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Eg4 Electronics
Products
Eg4 12000xp Eg4 12kpv Eg4 18kpv and 4 more
CVE-2025-52586

EG4 Electronics EG4 Inverters Cleartext Transmission of Sensitive Information

The MOD3 command traffic between the monitoring application and the inverter is transmitted in plaintext without encryption or obfuscation. This vulnerability may allow an attacker with access to a local network to intercept, manipulate, replay, or forge critical data, including read/write operations for voltage, current, and power configuration, operational status, alarms, telemetry, system reset, or inverter control commands, potentially disrupting power generation or reconfiguring inverter settings.

CVSS 4.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Eg4 Electronics
Products
Eg4 12000xp Eg4 12kpv Eg4 18kpv and 4 more
CVE-2025-53520

EG4 Electronics EG4 Inverters Download of Code Without Integrity Check

The affected product allows firmware updates to be downloaded from EG4's website, transferred via USB dongles, or installed through EG4's Monitoring Center (remote, cloud-connected interface) or via a serial connection, and can install these files without integrity checks. The TTComp archive format used for the firmware is unencrypted and can be unpacked and altered without detection.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Eg4 Electronics
Products
Eg4 12000xp Eg4 12kpv Eg4 18kpv and 4 more