CVE-2025-36751
CriticalSummary
Encryption is missing on the configuration interface for Growatt ShineLan-X and MIC 3300TL-X. This allows an attacker with access to the network to intercept and potentially manipulate communication requests between the inverter and its cloud endpoint.
Risk Assessment
Interception and manipulation of communication can lead to unauthorized configuration changes or data theft, threatening the integrity of the energy system.
Recommendation
It is recommended to implement encryption (e.g., TLS) for the configuration interface and monitor network traffic to detect unauthorized activities.
Original NVD description (English source)
Encryption is missing on the configuration interface for Growatt ShineLan-X and MIC 3300TL-X. This allows an attacker with access to the network to intercept and potentially manipulate communication requests between the inverter and its cloud endpoint.