CVE-2025-36753

CRITICAL

9.8

Descricao

The SWD debug interface on the Growatt ShineLan-X communication dongle is available by default, allowing an attacker to attain debug access to the device and to extracting secrets or domains from within the device

Detalhes CVE

Pontuacao CVSS v3.19.8

SeveridadeCRITICAL

Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vetor de ataqueNETWORK

ComplexidadeLOW

Privilegios necessariosNONE

Interacao do usuarioNONE

Publicado12/13/2025

Ultima modificacao1/14/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

growatt:shine_lan-xgrowatt:shine_lan-x_firmware

Fraquezas (CWE)

CWE-290

Referencias

https://csirt.divd.nl/CVE-2025-36753/(csirt@divd.nl)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.