PT-2025-51102 · Growatt · Growatt Shinelan-X

Hamid Rahmouni + 1 · Published 2025-12-13 · Updated 2025-12-13 · CVE-2025-36753

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Growatt ShineLan-X communication dongle (affected versions not specified)

Description The SWD debug interface on the device is enabled by default. This allows an attacker to gain debug access, potentially enabling the extraction of sensitive information such as secrets or domains stored within the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-290

Related Identifiers

CVE-2025-36753

Affected Products

Growatt Shinelan-X

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-36753 · Security Note
• https://osv.dev/vulnerability/CVE-2025-36753 · Vendor Advisory
• https://twitter.com/CVEnew/status/1999865329754021996 · Twitter Post
• https://csirt.divd.nl/CVE-2025-36753 · Note
• https://t.me/CVEtracker/39718 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1999939083804500467 · Twitter Post