An unauthenticated attacker can obtain a list of smart devices by knowing a valid username.
2025-04-15T21:16:04.200
2025-11-14T18:15:02.353
Analyzed
CVSSv3.1: 5.3 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | growatt | cloud_portal | ≤ 3.6.0 | Yes |