Medium · 6.5 CVE-2025-30512 EUVD-2025-11134GHSA-w9fx-47f2-7vff

Growatt Cloud portal External Control of System or Configuration Setting

Published Apr 15, 2025 · Updated Apr 16, 2025 · Assigned by icscert

Description

Unauthenticated attackers can send configuration settings to device and possible perform physical actions remotely (e.g., on/off).

Vendor	Product	Affected	Fixed
Growatt	Cloud portal	< 3.6.0	3.6.0

ICSA-25-105-04 Growatt Cloud Applications CISA ICS & IT advisories · May 6, 2025