CVE-2025-30512 Details
Description
Unauthenticated attackers can send configuration settings to device and possible perform physical actions remotely (e.g., on/off).
A vulnerability exists in Growatt Cloud Applications, specifically in the cloud portal versions through 3.6.0, allowing unauthenticated attackers to send configuration settings to devices and potentially perform physical actions remotely, such as turning devices on or off.
Growatt has reported that the cloud-based vulnerabilities were patched and no user action is needed. Additionally, Growatt recommends that users update all devices to the latest firmware version when available, use strong passwords and enable multi-factor authentication where applicable, and report any security concerns to [email protected]. CISA advises minimizing network exposure for control system devices, locating them behind firewalls, and using secure remote access methods like VPNs.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Apr 16, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04 | [email protected] | MitigationThird Party AdvisoryUS Government Resource |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-15 | External Control of System or Configuration Setting | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| growatt cloud portal | <= 3.6.0 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Nov 14, 2025 | Initial Analysis | [email protected] |
| Apr 15, 2025 | New CVE Received | [email protected] |