Log in Start free

Growatt

Products

ProductCVEsExploitedLatest
Cloud portal30–Apr 15, 2025
ShineLan-X7–Dec 13, 2025
https://oss.growatt.com1–Jul 19, 2025
https://server.growatt.com1–Jul 19, 2025

Exploited and recent CVEs

  • CVE-2025-36747 Critical 9.4 Hardcoded FTP Credentials within the firmware 0.3%
  • CVE-2025-36752 Critical 9.4 Undocumented backup Account and No Password Configuration Capability 0.3%
  • CVE-2025-36754 Critical 9.3 Authentication bypass on web interface 0.2%
  • CVE-2025-36748 High 8.4 Stored Cross-Site Scripting (XSS) vulnerability in Growatt ShineLan-X 0.2%
  • CVE-2025-36750 High 8.5 Stored cross site scripting (XSS) vulnerability in Growatt ShineLan-X 0.2%
  • CVE-2025-36753 High 8.6 SWD Interface Open on Growatt ShineLan-X 0.3%
  • CVE-2025-36751 Critical 9.4 Missing encryption on Local Configuration Interface or Cloud Endpoint Communication - Growatt MIC3300TL-X and ShineLan-X <0.1%
  • CVE-2025-29757 Critical 9.4 An incorrect authorisation check in the the 'plant transfer' function of the Growatt cloud service allowed a malicous attacker with a valid account to transfer any plant into his/her account. 0.5%
  • CVE-2025-29757 Critical 9.4 An incorrect authorisation check in the the 'plant transfer' function of the Growatt cloud service allowed a malicous attacker with a valid account to transfer any plant into his/her account. 0.5%
  • CVE-2025-27929 Medium 5.3 Growatt Cloud portal Authorization Bypass Through User-Controlled Key 0.3%
  • CVE-2025-24315 Medium 5.3 Growatt Cloud portal Authorization Bypass Through User-Controlled Key 0.6%
  • CVE-2025-27561 Medium 5.3 Growatt Cloud portal Authorization Bypass Through User-Controlled Key 0.3%
  • CVE-2025-30257 Medium 5.3 Growatt Cloud portal Authorization Bypass Through User-Controlled Key 0.3%
  • CVE-2025-31147 Medium 5.3 Growatt Cloud portal Authorization Bypass Through User-Controlled Key 0.3%
  • CVE-2025-31360 Medium 6.5 Growatt Cloud portal Authorization Bypass Through User-Controlled Key 0.5%
  • CVE-2025-30512 Medium 6.5 Growatt Cloud portal External Control of System or Configuration Setting 0.7%
  • CVE-2025-27927 Medium 5.3 Growatt Cloud portal Authorization Bypass Through User-Controlled Key 0.3%
  • CVE-2025-24297 Critical 9.8 Growatt Cloud portal Cross-site Scripting 0.5%
  • CVE-2025-30510 Critical 9.8 Growatt Cloud portal Insufficient Type Distinction 0.3%
  • CVE-2025-24850 Medium 5.3 Growatt Cloud portal Authorization Bypass Through User-Controlled Key 0.4%
  • CVE-2025-25276 Medium 5.3 Growatt Cloud portal Authorization Bypass Through User-Controlled Key 0.3%
  • CVE-2025-27565 Medium 5.3 Growatt Cloud portal Authorization Bypass Through User-Controlled Key 0.3%
  • CVE-2025-27575 Medium 5.3 Growatt Cloud portal Authorization Bypass Through User-Controlled Key 0.3%
  • CVE-2025-31950 Medium 5.3 Growatt Cloud portal Authorization Bypass Through User-Controlled Key 0.3%
  • CVE-2025-31945 Medium 5.3 Growatt Cloud portal Authorization Bypass Through User-Controlled Key 0.6%
  • CVE-2025-26857 Medium 5.3 Growatt Cloud portal Authorization Bypass Through User-Controlled Key 0.3%
  • CVE-2025-27719 Medium 5.3 Growatt Cloud portal Authorization Bypass Through User-Controlled Key 0.6%
  • CVE-2025-31654 Medium 5.3 Growatt Cloud portal Authorization Bypass Through User-Controlled Key 0.3%
  • CVE-2025-30514 Medium 5.3 Growatt Cloud portal Authorization Bypass Through User-Controlled Key 0.5%
  • CVE-2025-27938 Medium 5.3 Growatt Cloud portal Authorization Bypass Through User-Controlled Key 0.5%