CVE-2025-30512

Summary

Unauthenticated attackers can send configuration settings to device and possible perform physical actions remotely (e.g., on/off).

Affected Software

VendorProductVersion RangeStatus
GrowattCloud portal0 < 3.6.0affected

Weaknesses

  • CWE-15: CWE-15 External Control of System or Configuration Setting

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References