ShineLan-X 产品相关 7 条漏洞，AI 中文标题与摘要、CVSS、POC 一站汇总。
ベンダー: Growatt
| CVE ID | タイトル | CVSS | 深刻度 | 公開日 |
|---|---|---|---|---|
| CVE-2025-36747 | Hardcoded FTP Credentials within the firmware CWE-798 | 9.8AI | CriticalAI | 2025-12-13 |
| CVE-2025-36752 | Undocumented backup Account and No Password Configuration Capability CWE-798 | 9.8AI | CriticalAI | 2025-12-13 |
| CVE-2025-36754 | Authentication bypass on web interface CWE-290 | 7.4AI | HighAI | 2025-12-13 |
| CVE-2025-36748 | Stored Cross-Site Scripting (XSS) vulnerability in Growatt ShineLan-X CWE-79 | 5.4AI | MediumAI | 2025-12-13 |
| CVE-2025-36750 | Stored cross site scripting (XSS) vulnerability in Growatt ShineLan-X CWE-79 | 4.8AI | MediumAI | 2025-12-13 |
| CVE-2025-36753 | SWD Interface Open on Growatt ShineLan-X CWE-290 | 9.1AI | CriticalAI | 2025-12-13 |
| CVE-2025-36751 | Missing encryption on Local Configuration Interface or Cloud Endpoint Communication - Growatt MIC3300TL-X and ShineLan-X CWE-311 | 7.4AI | HighAI | 2025-12-13 |
ShineLan-X 产品累计公开 7 条 CVE 漏洞，本页提供按时间倒序的完整列表，包含 CVSS、CWE、AI 中文摘要与可获取的 POC 链接。