Description
Encryption is missing on the configuration interface for Growatt ShineLan-X and MIC 3300TL-X. This allows an attacker with access to the network to intercept and potentially manipulate communication requests between the inverter and its cloud endpoint.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Growatt | ShineLan-X | 3.6.0.0 – ≤ 3.6.0.2 | — |
References
- https://csirt.divd.nl/CVE-2025-36751/ third-party-advisory