Growatt vulnerabilities
38 CVEs and advisories name Growatt as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-36747Hardcoded FTP Credentials within the firmware
- CVE-2025-36752Undocumented backup Account and No Password Configuration Capability
- CVE-2025-36754Authentication bypass on web interface
- CVE-2025-36748Stored Cross-Site Scripting (XSS) vulnerability in Growatt ShineLan-X
- CVE-2025-36750Stored cross site scripting (XSS) vulnerability in Growatt ShineLan-X
- CVE-2025-36753SWD Interface Open on Growatt ShineLan-X
- CVE-2025-36751Missing encryption on Local Configuration Interface or Cloud Endpoint Communication - Growatt MIC3300TL-X and ShineLan-X
- CVE-2025-29757An incorrect authorisation check in the the 'plant transfer' function of the Growatt cloud service allowed a malicous attacker with a valid
- CVE-2025-27929Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- CVE-2025-24315Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- CVE-2025-27561Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- CVE-2025-30257Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- CVE-2025-31147Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- CVE-2025-31360Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- CVE-2025-30512Growatt Cloud portal External Control of System or Configuration Setting
- CVE-2025-27927Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- CVE-2025-24297Growatt Cloud portal Cross-site Scripting
- CVE-2025-30510Growatt Cloud portal Insufficient Type Distinction
- CVE-2025-24850Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- CVE-2025-25276Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- CVE-2025-27565Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- CVE-2025-27575Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- CVE-2025-31950Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- CVE-2025-31945Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- CVE-2025-26857Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- CVE-2025-27719Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- CVE-2025-31654Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- CVE-2025-30514Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- CVE-2025-27938Growatt Cloud portal Authorization Bypass Through User-Controlled Key
- CVE-2025-27939Growatt Cloud portal Authorization Bypass Through User-Controlled Key