Growatt vulnerabilities
38 published CVEs name Growatt among the affected products.
- Published CVEs
- 38
- Last 12 months
- 7
- Critical
- 7
- Known exploited
- 0
Critical 7High 4Medium 27Low 0Not scored 0
Newest CVEs
- CVE-2025-36747
Hardcoded FTP Credentials within the firmware
Growatt · ShineLan-X
Critical9.4 - CVE-2025-36752
Undocumented backup Account and No Password Configuration Capability
Growatt · ShineLan-X
Critical9.4 - CVE-2025-36754
Authentication bypass on web interface
Growatt · ShineLan-X
Critical9.3 - CVE-2025-36748
Stored Cross-Site Scripting (XSS) vulnerability in Growatt ShineLan-X
Growatt · ShineLan-X
High8.4 - CVE-2025-36750
Stored cross site scripting (XSS) vulnerability in Growatt ShineLan-X
Growatt · ShineLan-X
High8.5 - CVE-2025-36753
SWD Interface Open on Growatt ShineLan-X
Growatt · ShineLan-X
High8.6 - CVE-2025-36751
Missing encryption on Local Configuration Interface or Cloud Endpoint Communication - Growatt MIC3300TL-X and ShineLan-X
Growatt · ShineLan-X
Critical9.4 - CVE-2025-29757
An incorrect authorisation check in the the 'plant transfer' function of the Growatt cloud service allowed a malicous attacker with a valid account to transfer…
Growatt · https://oss.growatt.com
Critical9.4 - CVE-2025-27929
Growatt Cloud portal Authorization Bypass Through User-Controlled Key
Growatt · Cloud portal
Medium6.9 - CVE-2025-24315
Growatt Cloud portal Authorization Bypass Through User-Controlled Key
Growatt · Cloud portal
Medium6.9