Growatt

Growatt manufactures solar inverters and energy-management devices alongside web-based monitoring and control portals used in residential and commercial photovoltaic installations, a niche but strategically important segment of critical energy infrastructure. Vulnerabilities affecting the vendor skew toward serious outcomes, with a meaningful share reaching critical severity, and recur persistently across its Shine LAN-X monitoring interfaces and cloud portal through authentication and authorization weaknesses—including hard-coded credentials, user-controlled authorization keys, authentication spoofing, and cross-site scripting in web interfaces. These weakness classes reflect both the embedded nature of inverter firmware and the administrative access granted through cloud portals, creating dual pathways for compromise of energy systems at scale. Defenders managing solar deployments should prioritize firmware updates for exposed monitoring devices and enforce network segmentation between inverter management interfaces and untrusted networks; live severity, exploitation, and exposure counts are shown alongside this summary.