Approved changes feed: RSS · Atom

cpe:2.3:a:growatt:cloud_portal:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGrowatt (65d682fa-8d7c-51ff-b291-4e71ea076feb)
ProductCloud Portal (249369e5-4e78-5fca-9ae2-43cd6c0611b5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-31950 vulnerable 2026-06-08 07:18:58.846177 Growatt Cloud portal Authorization Bypass Through User-Controlled Key
MEDIUM (5.3)
An unauthenticated attacker can obtain EV charger energy consumption information of other users.
Published: 2025-04-15T21:16:16.331Z
Updated: 2025-04-16T15:08:28.970Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31949 vulnerable 2026-06-08 07:18:58.845799 Growatt Cloud portal Authorization Bypass Through User-Controlled Key
MEDIUM (5.3)
An authenticated attacker can obtain any plant name by knowing the plant ID.
Published: 2025-04-15T20:19:24.914Z
Updated: 2025-04-15T20:34:48.685Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31945 vulnerable 2026-06-08 07:18:58.840667 Growatt Cloud portal Authorization Bypass Through User-Controlled Key
MEDIUM (5.3)
An unauthenticated attacker can obtain other users' charger information.
Published: 2025-04-15T21:14:18.106Z
Updated: 2025-04-16T15:08:40.373Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31941 vulnerable 2026-06-08 07:18:58.838611 Growatt Cloud portal Authorization Bypass Through User-Controlled Key
MEDIUM (5.3)
An unauthenticated attacker can obtain a list of smart devices by knowing a valid username.
Published: 2025-04-15T20:28:53.866Z
Updated: 2025-04-16T15:10:22.745Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31933 vulnerable 2026-06-08 07:18:58.833231 Growatt Cloud Applications Authorization Bypass Through User-Controlled Key
MEDIUM (5.3)
An unauthenticated attacker can check the existence of usernames in the system by querying an API.
Published: 2025-04-15T20:17:05.854Z
Updated: 2025-04-16T15:10:38.283Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31654 vulnerable 2026-06-08 07:18:58.337796 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31360 vulnerable 2026-06-08 07:17:02.772504 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31357 vulnerable 2026-06-08 07:17:02.769331 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31147 vulnerable 2026-06-08 07:17:02.477086 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30514 vulnerable 2026-06-08 07:17:00.552348 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30512 vulnerable 2026-06-08 07:17:00.547316 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30511 vulnerable 2026-06-08 07:17:00.546803 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30510 vulnerable 2026-06-08 07:17:00.546160 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30257 vulnerable 2026-06-08 07:16:59.341193 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30254 vulnerable 2026-06-08 07:16:59.336384 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27939 vulnerable 2026-06-08 07:14:55.903087 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27938 vulnerable 2026-06-08 07:14:55.902635 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27929 vulnerable 2026-06-08 07:14:55.886513 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27927 vulnerable 2026-06-08 07:14:55.886122 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27719 vulnerable 2026-06-08 07:14:55.473537 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27575 vulnerable 2026-06-08 07:14:55.333866 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27568 vulnerable 2026-06-08 07:14:55.331396 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27565 vulnerable 2026-06-08 07:14:55.326709 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27561 vulnerable 2026-06-08 07:14:55.325538 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26857 vulnerable 2026-06-08 07:14:50.573416 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25276 vulnerable 2026-06-08 07:12:51.075860 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24850 vulnerable 2026-06-08 07:12:50.063017 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24487 vulnerable 2026-06-08 07:12:49.395225 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24315 vulnerable 2026-06-08 07:12:48.453664 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24297 vulnerable 2026-06-08 07:12:48.429931 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.