Skip to content
CVE PROGRAM SOURCE RECORD9.4 Critical

CVE-2025-36751

Missing encryption on Local Configuration Interface or Cloud Endpoint Communication - Growatt MIC3300TL-X and ShineLan-X

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
DIVD

Description

Encryption is missing on the configuration interface for Growatt ShineLan-X and MIC 3300TL-X. This allows an attacker with access to the network to intercept and potentially manipulate communication requests between the inverter and its cloud endpoint.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Growatt ShineLan-X

Default version status: unaffected

  • 3.6.0.0 to ≤ 3.6.0.2affected

References