← CVE Intelligence

CVE-2025-36751

Missing encryption on Local Configuration Interface or Cloud Endpoint Communication - Growatt MIC3300TL-X and ShineLan-X PUBLISHED

Description (CNA)

Encryption is missing on the configuration interface for Growatt ShineLan-X and MIC 3300TL-X. This allows an attacker with access to the network to intercept and potentially manipulate communication requests between the inverter and its cloud endpoint.

Affected (CNA)

Vendor / productVersions
Growatt / ShineLan-Xaffected 3.6.0.0 through 3.6.0.2

CWE

CWE-311

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.