How many Growatt shine lan-x firmware CVEs are in CISA KEV?

None of Growatt shine lan-x firmware's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Growatt shine lan-x firmware are affected?

2 distinct Growatt shine lan-x firmware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Growatt shine lan-x firmware CVEs?

Growatt shine lan-x firmware's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-798 (Use of Hard-coded Credentials), CWE-290 (Authentication Bypass by Spoofing).

How many critical Growatt shine lan-x firmware vulnerabilities are there?

Growatt shine lan-x firmware has 2 critical and 3 high-severity CVEs.

What is the average severity of Growatt shine lan-x firmware CVEs?

The average CVSS base score across Growatt shine lan-x firmware's scored CVEs is 8.9.

RadicalNotion.AI

Log in Start free

Growatt

5 CVEs

Growatt shine lan-x firmware Vulnerabilities

Name: Growatt shine lan-x firmware vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for shine lan-x firmware by Growatt.

5

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

8.9

Avg CVSS

2025–2025

Last updated December 13, 2025

Overview

Growatt shine lan-x firmware has 5 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 8.9.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Growatt shine lan-x firmware, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include shine lan-x.

Severity and exploitation

How the CVSS severity of Growatt shine lan-x firmware's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High3

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Growatt shine lan-x firmware's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No Growatt shine lan-x firmware CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Growatt shine lan-x firmware version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

3.6.0.0 <= v < 3.6.0.25 CVEs

Fixed in

3.6.0.25 CVEs

Find a version

5 CVEs

Sort

Hardcoded FTP Credentials within the firmware
CVE-2025-36747
Patch
CWE-798
Critical · CVSS 9.4
EPSS 0.3% (23th pct)2025-12-13
Undocumented backup Account and No Password Configuration Capability
CVE-2025-36752
Patch
CWE-798
Critical · CVSS 9.4
EPSS 0.3% (23th pct)2025-12-13
Stored Cross-Site Scripting (XSS) vulnerability in Growatt ShineLan-X
CVE-2025-36748
Patch
CWE-79
High · CVSS 8.4
EPSS 0.2% (5th pct)2025-12-13
Stored cross site scripting (XSS) vulnerability in Growatt ShineLan-X
CVE-2025-36750
Patch
CWE-79
High · CVSS 8.5
EPSS 0.2% (5th pct)2025-12-13
SWD Interface Open on Growatt ShineLan-X
CVE-2025-36753
Patch
CWE-290
High · CVSS 8.6
EPSS 0.3% (23th pct)2025-12-13

Common weakness types

The CWE weakness categories most often found in Growatt shine lan-x firmware CVEs. Follow any weakness for its full explanation.

Other Growatt products

Browse vulnerabilities for other products by Growatt.

cloud portal30 CVEs ShineLan-X7 CVEs shine lan-x5 CVEs Growatt cloud service (https://oss.growatt.com)1 CVEs Growatt cloud service (https://server.growatt.com)1 CVEs https://oss.growatt.com1 CVEs https://server.growatt.com1 CVEs

All Growatt vulnerabilities

Frequently asked questions

Common questions about Growatt shine lan-x firmware vulnerabilities.

How many CVEs does Growatt shine lan-x firmware have?: Growatt shine lan-x firmware has 5 published CVE records since 2025.
How many Growatt shine lan-x firmware CVEs are in CISA KEV?: None of Growatt shine lan-x firmware's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Growatt shine lan-x firmware vulnerabilities?: No Growatt shine lan-x firmware CVEs currently have a tracked public exploit in this dataset.
Which versions of Growatt shine lan-x firmware are affected?: 2 distinct Growatt shine lan-x firmware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Growatt shine lan-x firmware CVEs?: Growatt shine lan-x firmware's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-798 (Use of Hard-coded Credentials), CWE-290 (Authentication Bypass by Spoofing).
How many critical Growatt shine lan-x firmware vulnerabilities are there?: Growatt shine lan-x firmware has 2 critical and 3 high-severity CVEs.
What is the average severity of Growatt shine lan-x firmware CVEs?: The average CVSS base score across Growatt shine lan-x firmware's scored CVEs is 8.9.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Growatt shine lan-x firmware vulnerabilities

Monitor new Growatt shine lan-x firmware vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing