Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2025-30510

Growatt Cloud portal Insufficient Type Distinction

Description

An attacker can upload an arbitrary file instead of a plant image.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Growatt Cloud portal

Default version status: unaffected

  • 0 to < 3.6.0affected

References