CoreCVE
Back

CRITICAL

Missing encryption on Local Configuration Interface or Cloud Endpoint Communication - Growatt MIC3300TL-X and ShineLan-X

Published Dec 13, 2025

Description

Encryption is missing on the configuration interface for Growatt ShineLan-X and MIC 3300TL-X. This allows an attacker with access to the network to intercept and potentially manipulate communication requests between the inverter and its cloud endpoint.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-311

Missing Encryption of Sensitive Data

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner DIVD
Published Dec 13, 2025
Updated Dec 16, 2025
Reserved Apr 15, 2025
Link CVE-2025-36751
CISA Vulnrichment
Updated Dec 15, 2025
NVD
Status Deferred
Modified Oct 7, 2026
Link CVE-2025-36751
Red Hat
Severity n/a
Public date n/a
Links CVE-2025-36751
ENISA EUVD
Assigner DIVD
Published Dec 13, 2025
Updated Dec 16, 2025
Exploited since n/a
Link EUVD-2025-203256
EUVD-2025-203256