CNNVD-202512-2511 Information

CNNVD ID

CNNVD-202512-2511

CVE-2025-36748

  • CNNVD Published: 2025-12-13

Description (Chinese)

Growatt ShineLan-X是中国古瑞瓦特(Growatt)公司的一款光伏逆变器的数据记录器。 Growatt ShineLan-X存在安全漏洞,该漏洞源于本地配置Web服务器中的存储型跨站脚本漏洞,可能导致执行恶意代码。

Description (English)

Growatt ShineLan-X is a data recorder for a photovolt changer from the Chinese company Gravat. There is a security loophole in Growatt ShineLan-X, which originates from the local configuration of the storage-type cross-site script gap in the Web server, which may lead to the implementation of malicious codes.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

古瑞瓦特

Published

2025-12-13

Last Modified

2026-02-24

References

https://csirt.divd.nl/CVE-2025-36748/ https://access.redhat.com/security/cve/cve-2025-36748

Share on: