Alexandros Tokatlis

**Name of the Vulnerable Software and Affected Versions** Growatt ShineLan-X and MIC 3300TL-X (affected versions not specified) **Description** A lack of encryption on the configuration interface for Growatt ShineLan-X and MIC 3300TL-X allows an attacker with network access to intercept and potentially manipulate communication requests between the inverter and its cloud endpoint. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Growatt ShineLan-X communication dongle (affected versions not specified) **Description** The Growatt ShineLan-X communication dongle contains an undocumented backup account with undocumented credentials. This allows significant access to the device, including access to the Setting Center, effectively creating a backdoor for devices utilizing the dongle. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SolarEdge SE3680H (affected versions not specified) **Description** The SolarEdge SE3680H device exhibits an unauthenticated disclosure of sensitive information during the bootloader loop. During device initialization and while awaiting boot instructions, the bootloader emits diagnostic output, potentially revealing operating system information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SolarEdge SE3680H (affected versions not specified) **Description** The SolarEdge SE3680H ships with an outdated Linux kernel that has unpatched flaws in core subsystems. An attacker with network or local access could potentially achieve remote code execution, escalate privileges, or disclose sensitive information by exploiting these flaws. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.