Medium severity5.3NVD Advisory· Published Apr 15, 2025· Updated Jun 17, 2026
CVE-2025-31941
CVE-2025-31941
Description
An unauthenticated attacker can obtain a list of smart devices by knowing a valid username.
Affected products
20+ 1 more
- (no CPE)range: 0
- cpe:2.3:a:growatt:cloud_portal:*:*:*:*:*:*:*:*range: <=3.6.0
Patches
Vulnerability mechanics
References
1- www.cisa.gov/news-events/ics-advisories/icsa-25-105-04nvdMitigationThird Party AdvisoryUS Government Resource
News mentions
0No linked articles in our index yet.