CVE-2025-31941 Details

An authorization bypass vulnerability has been identified in Growatt Cloud Applications, specifically in the cloud portal versions through 3.6.0. This vulnerability allows unauthenticated attackers to obtain a list of smart devices associated with a valid username by querying an unprotected API. The issue arises from insufficient authorization controls, enabling the exploitation of user-specific data without proper authentication.

Growatt has reported that the cloud-based vulnerabilities were patched and no user action is needed. Users are advised to update all devices to the latest firmware version when available, use strong passwords, enable multi-factor authentication where applicable, and report any security concerns to Growatt's service email. CISA recommends minimizing network exposure for control system devices, using firewalls to isolate control system networks from business networks, and employing secure remote access methods like VPNs.