CVE-2025-47872
EG4 Electronics EG4 Inverters Observable Discrepancy
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
EG4 Electronics EG4 Inverters Observable Discrepancy
The public-facing product registration endpoint server responds differently depending on whether the S/N is valid and unregistered, valid but already registered, or does not exist in the database. Combined with the fact that serial numbers are sequentially assigned, this allows an attacker to gain information on the product registration status of different S/Ns.
Reserved 2025-07-30 | Published 2025-08-08 | Updated 2025-08-08 | Assigner icscertAnthony Rose of BC Security reported these vulnerabilities to CISA.
www.cisa.gov/news-events/ics-advisories/icsa-25-219-07
Support options
