Filtered by vendor Growatt Subscriptions
Total 6 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-31950 1 Growatt 1 Cloud Portal 2025-11-12 5.3 Medium
An unauthenticated attacker can obtain EV charger energy consumption information of other users.
CVE-2025-31945 1 Growatt 1 Cloud Portal 2025-11-12 5.3 Medium
An unauthenticated attacker can obtain other users' charger information.
CVE-2025-31654 1 Growatt 1 Cloud Portal 2025-11-12 5.3 Medium
An attacker can get information about the groups of the smart home devices for arbitrary users (i.e., "rooms").
CVE-2025-31360 1 Growatt 1 Cloud Portal 2025-11-12 6.5 Medium
Unauthenticated attackers can trigger device actions associated with specific "scenes" of arbitrary users.
CVE-2025-27568 1 Growatt 1 Cloud Portal 2025-11-12 5.3 Medium
An unauthenticated attacker can get users' emails by knowing usernames. A password reset email will be sent in response to this unsolicited request.
CVE-2025-24487 1 Growatt 1 Cloud Portal 2025-11-12 5.3 Medium
An unauthenticated attacker can infer the existence of usernames in the system by querying an API.