medium5.3
CVE-2025-31949
An authenticated attacker can obtain any plant name by knowing the plant ID.
Impact
An authenticated attacker can obtain any plant name by knowing the plant ID.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Growatt | Cloud Portal | through 3.6.0 |