Growatt records
35 published records for vendor growatt.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-639 Authorization Bypass Through User-Controlled Key26
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-798 Use of Hard-coded Credentials2
- CWE-15 External Control of System or Configuration Setting1
- CWE-290 Authentication Bypass by Spoofing1
- CWE-351 Insufficient Type Distinction1
The weakness classes this vendor ships most often: where to look.
CWEAll records
35 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
37Monitor | CVE-2025-24297No exploit | Growatt Cloud portal Cross-site Scriptinggrowatt · cloud portal · CWE-79 | Critical9.3 | — | 0.5% | Apr 15, 2025 |
37Monitor | CVE-2025-36752No exploit | Undocumented backup Account and No Password Configuration Capabilitygrowatt · shine lan-x firmware · CWE-798 | Critical9.4 | — | 0.3% | Dec 13, 2025 |
37Monitor | CVE-2025-36747No exploit | Hardcoded FTP Credentials within the firmwaregrowatt · shine lan-x firmware · CWE-798 | Critical9.4 | — | 0.3% | Dec 13, 2025 |
37Monitor | CVE-2025-30510No exploit | Growatt Cloud portal Insufficient Type Distinctiongrowatt · cloud portal · CWE-351 | Critical9.3 | — | 0.2% | Apr 15, 2025 |
34Monitor | CVE-2025-30511No exploit | Growatt Cloud Applications Cross-site Scriptinggrowatt · cloud portal · CWE-79 | High8.7 | — | 0.4% | Apr 15, 2025 |
34Monitor | CVE-2025-36753No exploit | SWD Interface Open on Growatt ShineLan-Xgrowatt · shine lan-x firmware · CWE-290 | High8.6 | — | 0.3% | Dec 13, 2025 |
34Monitor | CVE-2025-36750No exploit | Stored cross site scripting (XSS) vulnerability in Growatt ShineLan-Xgrowatt · shine lan-x firmware · CWE-79 | High8.6 | — | 0.1% | Dec 13, 2025 |
33Monitor | CVE-2025-36748No exploit | Stored Cross-Site Scripting (XSS) vulnerability in Growatt ShineLan-Xgrowatt · shine lan-x firmware · CWE-79 | High8.4 | — | 0.1% | Dec 13, 2025 |
27Monitor | CVE-2025-27939No exploit | Growatt Cloud portal Authorization Bypass Through User-Controlled Keygrowatt · cloud portal · CWE-639 | Medium6.9 | — | 0.8% | Apr 15, 2025 |
27Monitor | CVE-2025-30512No exploit | Growatt Cloud portal External Control of System or Configuration Settinggrowatt · cloud portal · CWE-15 | Medium6.9 | — | 0.6% | Apr 15, 2025 |
27Monitor | CVE-2025-24315No exploit | Growatt Cloud portal Authorization Bypass Through User-Controlled Keygrowatt · cloud portal · CWE-639 | Medium6.9 | — | 0.6% | Apr 15, 2025 |
27Monitor | CVE-2025-31945No exploit | Growatt Cloud portal Authorization Bypass Through User-Controlled Keygrowatt · cloud portal · CWE-639 | Medium6.9 | — | 0.5% | Apr 15, 2025 |
27Monitor | CVE-2025-27719No exploit | Growatt Cloud portal Authorization Bypass Through User-Controlled Keygrowatt · cloud portal · CWE-639 | Medium6.9 | — | 0.5% | Apr 15, 2025 |
27Monitor | CVE-2025-31360No exploit | Growatt Cloud portal Authorization Bypass Through User-Controlled Keygrowatt · cloud portal · CWE-639 | Medium6.9 | — | 0.5% | Apr 15, 2025 |
27Monitor | CVE-2025-27568No exploit | Growatt Cloud portal Authorization Bypass Through User-Controlled Keygrowatt · cloud portal · CWE-639 | Medium6.9 | — | 0.4% | Apr 15, 2025 |
27Monitor | CVE-2025-30254No exploit | Growatt Cloud portal Authorization Bypass Through User-Controlled Keygrowatt · cloud portal · CWE-639 | Medium6.9 | — | 0.4% | Apr 15, 2025 |
27Monitor | CVE-2025-27938No exploit | Growatt Cloud portal Authorization Bypass Through User-Controlled Keygrowatt · cloud portal · CWE-639 | Medium6.9 | — | 0.4% | Apr 15, 2025 |
27Monitor | CVE-2025-24487No exploit | Growatt Cloud portal Authorization Bypass Through User-Controlled Keygrowatt · cloud portal · CWE-639 | Medium6.9 | — | 0.4% | Apr 15, 2025 |
27Monitor | CVE-2025-30514No exploit | Growatt Cloud portal Authorization Bypass Through User-Controlled Keygrowatt · cloud portal · CWE-639 | Medium6.9 | — | 0.4% | Apr 15, 2025 |
27Monitor | CVE-2025-24850No exploit | Growatt Cloud portal Authorization Bypass Through User-Controlled Keygrowatt · cloud portal · CWE-639 | Medium6.9 | — | 0.3% | Apr 15, 2025 |
27Monitor | CVE-2025-26857No exploit | Growatt Cloud portal Authorization Bypass Through User-Controlled Keygrowatt · cloud portal · CWE-639 | Medium6.9 | — | 0.3% | Apr 15, 2025 |
27Monitor | CVE-2025-25276No exploit | Growatt Cloud portal Authorization Bypass Through User-Controlled Keygrowatt · cloud portal · CWE-639 | Medium6.9 | — | 0.3% | Apr 15, 2025 |
27Monitor | CVE-2025-31357No exploit | Growatt Cloud portal Authorization Bypass Through User-Controlled Keygrowatt · cloud portal · CWE-639 | Medium6.9 | — | 0.3% | Apr 15, 2025 |
27Monitor | CVE-2025-31147No exploit | Growatt Cloud portal Authorization Bypass Through User-Controlled Keygrowatt · cloud portal · CWE-639 | Medium6.9 | — | 0.3% | Apr 15, 2025 |
27Monitor | CVE-2025-31950No exploit | Growatt Cloud portal Authorization Bypass Through User-Controlled Keygrowatt · cloud portal · CWE-639 | Medium6.9 | — | 0.3% | Apr 15, 2025 |
- CVE-2025-2429737Monitor
Growatt Cloud portal Cross-site Scripting
CriticalCVSS 9.3No exploitEPSS 0%growatt · cloud portalApr 15, 2025
- CVE-2025-3675237Monitor
Undocumented backup Account and No Password Configuration Capability
CriticalCVSS 9.4No exploitEPSS 0%growatt · shine lan-x firmwareDec 13, 2025
- CVE-2025-3674737Monitor
Hardcoded FTP Credentials within the firmware
CriticalCVSS 9.4No exploitEPSS 0%growatt · shine lan-x firmwareDec 13, 2025
- CVE-2025-3051037Monitor
Growatt Cloud portal Insufficient Type Distinction
CriticalCVSS 9.3No exploitEPSS 0%growatt · cloud portalApr 15, 2025
- CVE-2025-3051134Monitor
Growatt Cloud Applications Cross-site Scripting
HighCVSS 8.7No exploitEPSS 0%growatt · cloud portalApr 15, 2025
- CVE-2025-3675334Monitor
SWD Interface Open on Growatt ShineLan-X
HighCVSS 8.6No exploitEPSS 0%growatt · shine lan-x firmwareDec 13, 2025
- CVE-2025-3675034Monitor
Stored cross site scripting (XSS) vulnerability in Growatt ShineLan-X
HighCVSS 8.6No exploitEPSS 0%growatt · shine lan-x firmwareDec 13, 2025
- CVE-2025-3674833Monitor
Stored Cross-Site Scripting (XSS) vulnerability in Growatt ShineLan-X
HighCVSS 8.4No exploitEPSS 0%growatt · shine lan-x firmwareDec 13, 2025
- CVE-2025-2793927Monitor
Growatt Cloud portal Authorization Bypass Through User-Controlled Key
MediumCVSS 6.9No exploitEPSS 0%growatt · cloud portalApr 15, 2025
- CVE-2025-3051227Monitor
Growatt Cloud portal External Control of System or Configuration Setting
MediumCVSS 6.9No exploitEPSS 0%growatt · cloud portalApr 15, 2025
- CVE-2025-2431527Monitor
Growatt Cloud portal Authorization Bypass Through User-Controlled Key
MediumCVSS 6.9No exploitEPSS 0%growatt · cloud portalApr 15, 2025
- CVE-2025-3194527Monitor
Growatt Cloud portal Authorization Bypass Through User-Controlled Key
MediumCVSS 6.9No exploitEPSS 0%growatt · cloud portalApr 15, 2025
- CVE-2025-2771927Monitor
Growatt Cloud portal Authorization Bypass Through User-Controlled Key
MediumCVSS 6.9No exploitEPSS 0%growatt · cloud portalApr 15, 2025
- CVE-2025-3136027Monitor
Growatt Cloud portal Authorization Bypass Through User-Controlled Key
MediumCVSS 6.9No exploitEPSS 0%growatt · cloud portalApr 15, 2025
- CVE-2025-2756827Monitor
Growatt Cloud portal Authorization Bypass Through User-Controlled Key
MediumCVSS 6.9No exploitEPSS 0%growatt · cloud portalApr 15, 2025
- CVE-2025-3025427Monitor
Growatt Cloud portal Authorization Bypass Through User-Controlled Key
MediumCVSS 6.9No exploitEPSS 0%growatt · cloud portalApr 15, 2025
- CVE-2025-2793827Monitor
Growatt Cloud portal Authorization Bypass Through User-Controlled Key
MediumCVSS 6.9No exploitEPSS 0%growatt · cloud portalApr 15, 2025
- CVE-2025-2448727Monitor
Growatt Cloud portal Authorization Bypass Through User-Controlled Key
MediumCVSS 6.9No exploitEPSS 0%growatt · cloud portalApr 15, 2025
- CVE-2025-3051427Monitor
Growatt Cloud portal Authorization Bypass Through User-Controlled Key
MediumCVSS 6.9No exploitEPSS 0%growatt · cloud portalApr 15, 2025
- CVE-2025-2485027Monitor
Growatt Cloud portal Authorization Bypass Through User-Controlled Key
MediumCVSS 6.9No exploitEPSS 0%growatt · cloud portalApr 15, 2025
- CVE-2025-2685727Monitor
Growatt Cloud portal Authorization Bypass Through User-Controlled Key
MediumCVSS 6.9No exploitEPSS 0%growatt · cloud portalApr 15, 2025
- CVE-2025-2527627Monitor
Growatt Cloud portal Authorization Bypass Through User-Controlled Key
MediumCVSS 6.9No exploitEPSS 0%growatt · cloud portalApr 15, 2025
- CVE-2025-3135727Monitor
Growatt Cloud portal Authorization Bypass Through User-Controlled Key
MediumCVSS 6.9No exploitEPSS 0%growatt · cloud portalApr 15, 2025
- CVE-2025-3114727Monitor
Growatt Cloud portal Authorization Bypass Through User-Controlled Key
MediumCVSS 6.9No exploitEPSS 0%growatt · cloud portalApr 15, 2025
- CVE-2025-3195027Monitor
Growatt Cloud portal Authorization Bypass Through User-Controlled Key
MediumCVSS 6.9No exploitEPSS 0%growatt · cloud portalApr 15, 2025