Vulnerability in Growatt Shinelan-X
CVE-2025-36751
Encryption is missing on the configuration interface for Growatt ShineLan-X and MIC 3300TL-X. This allows an attacker with access to the network to intercept and potentially manipulate communication requests between the inverter and its cloud endpoint.
EPSS: 0.001 (0.0th percentile) — read the EPSS interpretation.
Affected products
- Growatt Shinelan-x — versions 3.6.0.0
Weakness classification (CWE)
References
- csirt@divd.nl (third-party-advisory)