You do not have permission to edit this page, for the following reasons:
The SolarEdge SE3680H is a single-phase HD-Wave residential PV inverter. Three CVEs list se3680h in their CPE configurations. CVE-2025-36745 (CVSS 7.8) is the most consequential: the unit ships an outdated Linux kernel with unpatched flaws in core subsystems, meaning the attack surface is the whole operating system rather than one web handler. CVE-2025-36743 (CVSS 6.8) exposes an unauthenticated debug and test interface, and CVE-2025-36744 (CVSS 2.4) leaks information during the bootloader loop. What separates this device from the cameras assessed here is blast radius rather than flaw count: an inverter sits on the DC side of a residential solar installation and manages grid synchronisation, so a compromise can affect power delivery and, in aggregate across many units, grid stability, which is why regulators have taken an interest in inverter security. Against that, SolarEdge does push firmware through its monitoring platform, which is a better update story than the manually-updated cameras. The device is rated D: unauthenticated access to a debug interface and a stale kernel are documented for this exact model, but no remote pre-auth full-compromise CVE and no recorded exploitation campaign exist, so the evidence does not reach the F band. Several values, notably communications and storage encryption on local interfaces, are provisional because no model-level SolarEdge documentation could be retrieved.
For new submissions, pages will appear blank until approval.
Summary: This is a minor edit Watch this page
Save page Show preview Show changes Cancel
