medium5.3
CVE-2025-27927
An unauthenticated attackers can obtain a list of smart devices by knowing a valid username through an unprotected API.
Impact
An unauthenticated attackers can obtain a list of smart devices by knowing a valid username through an unprotected API.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Growatt | Cloud Portal | through 3.6.0 |