Record status Published
Identifier year (not publication year) 2025
Source publication Aug 8, 2025
Source updated Sep 8, 2025
Imported by cveboard Oct 24, 2026
CNA source text (English) EG4 Electronics EG4 Inverters Cleartext Transmission of Sensitive Information
The MOD3 command traffic between the monitoring application and the
inverter is transmitted in plaintext without encryption or obfuscation.
This vulnerability may allow an attacker with access to a local network
to intercept, manipulate, replay, or forge critical data, including
read/write operations for voltage, current, and power configuration,
operational status, alarms, telemetry, system reset, or inverter control
commands, potentially disrupting power generation or reconfiguring
inverter settings.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
EG4 12kPV
Vendor EG4 Electronics
Product EG4 12kPV
Platforms Unknown
Default status unaffected
EG4 12kPV · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
all versions affectedUnavailable Unavailable Unavailable None listed
EG4 18kPV
Vendor EG4 Electronics
Product EG4 18kPV
Platforms Unknown
Default status unaffected
EG4 18kPV · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
all versions affectedUnavailable Unavailable Unavailable None listed
EG4 Flex 21
Vendor EG4 Electronics
Product EG4 Flex 21
Platforms Unknown
Default status unaffected
EG4 Flex 21 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
all versions affectedUnavailable Unavailable Unavailable None listed
EG4 Flex 18
Vendor EG4 Electronics
Product EG4 Flex 18
Platforms Unknown
Default status unaffected
EG4 Flex 18 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
all versions affectedUnavailable Unavailable Unavailable None listed
EG4 6000XP
Vendor EG4 Electronics
Product EG4 6000XP
Platforms Unknown
Default status unaffected
EG4 6000XP · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
all versions affectedUnavailable Unavailable Unavailable None listed
EG4 12000XP
Vendor EG4 Electronics
Product EG4 12000XP
Platforms Unknown
Default status unaffected
EG4 12000XP · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
all versions affectedUnavailable Unavailable Unavailable None listed
EG4 GridBoss
Vendor EG4 Electronics
Product EG4 GridBoss
Platforms Unknown
Default status unaffected
EG4 GridBoss · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
all versions affectedUnavailable Unavailable Unavailable None listed