CVE-2025-7769 | Tigo Energy Cloud Connect Advanced up to 4.0.1 /cgi-bin/mobile_api DEVICE_PING command injection (icsa-25-217-02)

A vulnerability, which was classified as critical, has been found in Tigo Energy Cloud Connect Advanced up to 4.0.1. Affected by this issue is some unknown functionality of the file /cgi-bin/mobile_api. The manipulation of the argument DEVICE_PING leads to command injection.

This vulnerability is handled as CVE-2025-7769. The attack may be launched remotely. There is no exploit available.