CVE-2025-30512: Growatt Cloud Portal

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Unauthenticated attackers can send configuration settings to device and possible perform physical actions remotely (e.g., on/off).

Affected products

• Growatt Cloud Portal: up to and including 3.6.0

Published 2025-04-15. Last modified 2026-06-17.