Description
An attacker can export other users' plant information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Growatt | Cloud portal | < 3.6.0 | 3.6.0 |
Advisories 1
- ICSA-25-105-04 Growatt Cloud Applications CISA ICS & IT advisories · May 6, 2025
Medium · 5.3
CVE-2025-24850
EUVD-2025-11138GHSA-6jhq-f3cp-jgmp
Growatt Cloud portal Authorization Bypass Through User-Controlled Key
Published Apr 15, 2025 · Updated Apr 16, 2025 · Assigned by icscert