medium5.3
CVE-2025-27938
Unauthenticated attackers can obtain restricted information about a user's smart device collections (i.e., "rooms").
Impact
Unauthenticated attackers can obtain restricted information about a user's smart device collections (i.e., "rooms").
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Growatt | Cloud Portal | through 3.6.0 |