← All advisories

Medium severity5.3NVD Advisory· Published Apr 15, 2025· Updated Jun 17, 2026

CVE-2025-24487

CVE-2025-24487

Description

An unauthenticated attacker can infer the existence of usernames in the system by querying an API.

Affected products

1

Growatt/Cloud Portalcpe-rescue
Range: 0

Patches

Vulnerability mechanics

References

1

www.cisa.gov/news-events/ics-advisories/icsa-25-105-04nvdMitigationThird Party AdvisoryUS Government Resource

News mentions

0

No linked articles in our index yet.