CVE-2025-36751CWE-311

CVE-2025-36751

published December 13, 2025

CVSS
9.4
EPSS
0%
Percentile
0.1
In the wild
Unconfirmed
What it is

Encryption is missing on the configuration interface for Growatt ShineLan-X and MIC 3300TL-X. This allows an attacker with access to the network to intercept and potentially manipulate communication requests between the inverter and its cloud endpoint.

The record
Technical detail
CVSS
9.4 · NONE
CVSS v4.0
Not supplied
EPSS
0.00074 · 0.1th percentile
Weakness
CWE-311 · Missing Encryption of Sensitive Data
Published
2025-12-13T21:16Z
References (1)
https://csirt.divd.nl/CVE-2025-36751/ · [email protected]
EPSS history
Timeline
  • 13 DEC 08:16Z
    Missing encryption on Local Configuration Interface or Cloud Endpoint Communication - Growatt MIC3300TL-X and ShineLan-X
    cvelistv5