critical9.8
CVE-2025-30510
An attacker can upload an arbitrary file instead of a plant image.
Impact
An attacker can upload an arbitrary file instead of a plant image.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Growatt | Cloud Portal | through 3.6.0 |