KACO Blueplanet GridSave Storage Systems Insecure Cryptographic Key Unauthorized Access

The vulnerability of KACO Blueplanet GridSave energy storage systems lies in the use of a rigidly encrypted cryptographic key. Exploiting this vulnerability could allow an unauthorized actor to gain unauthorized access to the protected information...

CVE-2025-40946

A vulnerability has been identified in blueplanet 100 NX3 M8 All versions, blueplanet 100 TL3 GEN2 All versions V6.1.4.9, blueplanet 105 TL3 All versions, blueplanet 105 TL3 GEN2 All versions V6.1.4.9, blueplanet 110 TL3 All versions, blueplanet 125 NX3 M10 All versions, blueplanet 125 TL3 All...

EUVD-2025-209779

A vulnerability has been identified in blueplanet 100 NX3 M8 All versions, blueplanet 100 TL3 GEN2 All versions V6.1.4.9, blueplanet 105 TL3 All versions, blueplanet 105 TL3 GEN2 All versions V6.1.4.9, blueplanet 110 TL3 All versions, blueplanet 125 NX3 M11 All versions, blueplanet 125 TL3 All...

CVE-2025-40946

A vulnerability has been identified in blueplanet 100 NX3 M8 All versions, blueplanet 100 TL3 GEN2 All versions V6.1.4.9, blueplanet 105 TL3 All versions V3.92, blueplanet 105 TL3 GEN2 All versions V6.1.4.9, blueplanet 110 TL3 All versions V3.92, blueplanet 125 NX3 M10 All versions, blueplanet 12...

CVE-2026-41125

A vulnerability has been identified in blueplanet 100 NX3 M8 All versions, blueplanet 100 TL3 GEN2 All versions, blueplanet 105 TL3 All versions V3.92, blueplanet 105 TL3 GEN2 All versions, blueplanet 110 TL3 All versions V3.92, blueplanet 125 NX3 M10 All versions, blueplanet 125 TL3 All versions...

CVE-2026-41125

A vulnerability has been identified in blueplanet 100 NX3 M8 All versions, blueplanet 100 TL3 GEN2 All versions, blueplanet 105 TL3 All versions, blueplanet 105 TL3 GEN2 All versions, blueplanet 110 TL3 All versions, blueplanet 125 NX3 M10 All versions, blueplanet 125 TL3 All versions, blueplanet...

CVE-2026-41125

A vulnerability has been identified in blueplanet 100 NX3 M8 All versions, blueplanet 100 TL3 GEN2 All versions, blueplanet 105 TL3 All versions V3.92, blueplanet 105 TL3 GEN2 All versions, blueplanet 110 TL3 All versions V3.92, blueplanet 125 NX3 M10 All versions, blueplanet 125 TL3 All versions...

CVE-2025-40946

A vulnerability has been identified in blueplanet 100 NX3 M8 All versions, blueplanet 100 TL3 GEN2 All versions V6.1.4.9, blueplanet 105 TL3 All versions, blueplanet 105 TL3 GEN2 All versions V6.1.4.9, blueplanet 110 TL3 All versions, blueplanet 125 NX3 M10 All versions, blueplanet 125 TL3 All...

CVE-2025-40946

A vulnerability has been identified in blueplanet 100 NX3 M8 All versions, blueplanet 100 TL3 GEN2 All versions V6.1.4.9, blueplanet 105 TL3 All versions V3.92, blueplanet 105 TL3 GEN2 All versions V6.1.4.9, blueplanet 110 TL3 All versions V3.92, blueplanet 125 NX3 M10 All versions, blueplanet 12...

CVE-2025-40946

CVE-2025-40946 affects a wide range of blueplanet devices (NX3/TL3/TL3-S/TL3-GEN2, gridsafe, hybrid) across many models and versions. The root cause is a CRC16-based algorithm used to generate Technical Service credentials, which could enable an attacker to derive credentials from a device serial...

CVE-2025-40946

A vulnerability has been identified in blueplanet 100 NX3 M8 All versions, blueplanet 100 TL3 GEN2 All versions V6.1.4.9, blueplanet 105 TL3 All versions V3.92, blueplanet 105 TL3 GEN2 All versions V6.1.4.9, blueplanet 110 TL3 All versions V3.92, blueplanet 125 NX3 M10 All versions, blueplanet 12...

PT-2026-39990

Name of the Vulnerable Software and Affected Versions blueplanet 100 NX3 M8 affected versions not specified blueplanet 100 TL3 GEN2 affected versions not specified blueplanet 105 TL3 affected versions not specified blueplanet 105 TL3 GEN2 affected versions not specified blueplanet 110 TL3 affecte...

PT-2026-39979

Name of the Vulnerable Software and Affected Versions blueplanet 100 NX3 M8 affected versions not specified blueplanet 100 TL3 GEN2 versions prior to V6.1.4.9 blueplanet 105 TL3 affected versions not specified blueplanet 105 TL3 GEN2 versions prior to V6.1.4.9 blueplanet 110 TL3 affected versions...

Siemens KACO Blueplanet Inverters

SUMMARY KACO blueplanet Inverters contain multiple vulnerabilities that could allow an attacker to derive the credentials from the devices serial number and misuse them to gain unauthorized access. KACO new energy GmbH has released new versions for several affected products and recommends to...

Siemens BluePlanet SQL injection vulnerability

Siemens Blueplanet is a series of solar inverter and energy monitoring products developed by German company Siemens, aimed at photovoltaic power generation and energy storage systems. Several Siemens products have SQL injection vulnerabilities, which stem from improper handling of special element...

CVE-2026-41125: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been identified in blueplanet 100 NX3 M8 All versions, blueplanet 100 TL3 GEN2 All versions, blueplanet 105 TL3 All versions V3.92, blueplanet 105 TL3 GEN2 All versions, blueplanet 110 TL3 All versions V3.92, blueplanet 125 NX3 M10 All versions, blueplanet 125 TL3 All versions...

CVE-2025-40946: Use of Hard-coded Cryptographic Key

A vulnerability has been identified in blueplanet 100 NX3 M8 All versions, blueplanet 100 TL3 GEN2 All versions V6.1.4.9, blueplanet 105 TL3 All versions V3.92, blueplanet 105 TL3 GEN2 All versions V6.1.4.9, blueplanet 110 TL3 All versions V3.92, blueplanet 125 NX3 M10 All versions, blueplanet 12...

Siemens BluePlanet security vulnerabilities

Siemens BluePlanet is a series of solar inverter and energy monitoring products developed by German company Siemens, aimed at photovoltaic power generation and energy storage systems. Several Siemens products have security vulnerabilities. These vulnerabilities stem from technology service...