What’s Vulnerable › Products

Growatt ShineLan-X vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your Growatt ShineLan-X version is affected

Latest Growatt ShineLan-X vulnerabilities

• CVE-2025-36754 — Authentication bypass on web interface (CVSS 9.3)
• CVE-2025-36753 — SWD Interface Open on Growatt ShineLan-X (CVSS 9.8)
• CVE-2025-36752 — Undocumented backup Account and No Password Configuration Capability (CVSS 9.8)
• CVE-2025-36751 — Missing encryption on Local Configuration Interface or Cloud Endpoint Communication - Growatt MIC3300TL-X and ShineLan-X (CVSS 9.4)
• CVE-2025-36750 — Stored cross site scripting (XSS) vulnerability in Growatt ShineLan-X (CVSS 5.4)
• CVE-2025-36748 — Stored Cross-Site Scripting (XSS) vulnerability in Growatt ShineLan-X (CVSS 5.4)
• CVE-2025-36747 — Hardcoded FTP Credentials within the firmware (CVSS 9.8)