medium5.3
CVE-2025-31357
An unauthenticated attacker can obtain a user's plant list by knowing the username.
Impact
An unauthenticated attacker can obtain a user's plant list by knowing the username.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Growatt | Cloud Portal | through 3.6.0 |