medium5.3
CVE-2025-27575
An unauthenticated attacker can obtain EV charger version and firmware upgrading history by knowing the charger ID.
Impact
An unauthenticated attacker can obtain EV charger version and firmware upgrading history by knowing the charger ID.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Growatt | Cloud Portal | through 3.6.0 |