CVE-2025-7769

CVE-2025-7769 – Injeção Remota de Comandos no mobileapi Descrição : Este repositório contém um exploit de Prova‑de‑Conceito PoC para CVE‑2025‑7769 , uma vulnerabilidade crítica de Injeção Remota de Comandos encontrada em dispositivos Tigo Energy CCA que expõem o endpoint /cgi-bin/mobileapi. A...

Tigo Energy CCA Command Injection

This repository contains a proof of concept exploit exploit for CVE‑2025‑7769, a critical remote command injection vulnerability found in Tigo Energy CCA appliances exposing the /cgi-bin/mobileapi endpoint...

CVE-2025-7770

Tigo Energy's CCA device is vulnerable to insecure session ID generation in their remote API. The session IDs are generated using a predictable method based on the current timestamp, allowing attackers to recreate valid session IDs. When combined with the ability to circumvent session ID...

PT-2025-32227 · Tigo Energy · Tigo Energy Cca

Name of the Vulnerable Software and Affected Versions: Tigo Energy CCA affected versions not specified Description: The Tigo Energy CCA is susceptible to a command injection issue in the /cgi-bin/mobile api endpoint when the DEVICE PING command is invoked. This allows for remote code execution du...