Cloud Connect Advanced vulnerabilities
3 known vulnerabilities in Cloud Connect Advanced from Tigo Energy. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.7 High severity
Cloud Connect Advanced: Predictable Seed in Pseudo-Random Number Generator (PRNG)
Tigo Energy's CCA device is vulnerable to insecure session ID generation in their remote API. The session IDs are generated using a predictable method based on the current timestamp, allowing attackers to recreate valid session IDs. When combined with the abil
- 8.7 High severity
Cloud Connect Advanced: Improper Neutralization of Special Elements used in a Command
Tigo Energy's CCA is vulnerable to a command injection vulnerability in the /cgi-bin/mobile_api endpoint when the DEVICE_PING command is called, allowing remote code execution due to improper handling of user input. When used with default credentials, this ena
- 9.3 Critical severity
Cloud Connect Advanced: Use of Hard-coded Credentials
Tigo Energy's Cloud Connect Advanced (CCA) device contains hard-coded credentials that allow unauthorized users to gain administrative access. This vulnerability enables attackers to escalate privileges and take full control of the device, potentially modifyin