medium6.5
CVE-2025-31360
Unauthenticated attackers can trigger device actions associated with specific "scenes" of arbitrary users.
Impact
Unauthenticated attackers can trigger device actions associated with specific "scenes" of arbitrary users.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Growatt | Cloud Portal | through 3.6.0 |