Growatt ShineLan-X

• CVE-2025-36747 Critical 9.4 Hardcoded FTP Credentials within the firmware 0.3%
• CVE-2025-36752 Critical 9.4 Undocumented backup Account and No Password Configuration Capability 0.3%
• CVE-2025-36754 Critical 9.3 Authentication bypass on web interface 0.2%
• CVE-2025-36748 High 8.4 Stored Cross-Site Scripting (XSS) vulnerability in Growatt ShineLan-X 0.2%
• CVE-2025-36750 High 8.5 Stored cross site scripting (XSS) vulnerability in Growatt ShineLan-X 0.2%
• CVE-2025-36753 High 8.6 SWD Interface Open on Growatt ShineLan-X 0.3%
• CVE-2025-36751 Critical 9.4 Missing encryption on Local Configuration Interface or Cloud Endpoint Communication - Growatt MIC3300TL-X and ShineLan-X <0.1%