Description

An incorrect authorisation check in the the 'plant transfer' function of the Growatt cloud service allowed a malicous attacker with a valid account to transfer any plant into his/her account.

INFO

Published Date :

2025-07-19T05:15:36.810Z

Last Modified :

2025-07-22T10:05:55.465Z

Source :

DIVD
AFFECTED PRODUCTS

The following products are affected by CVE-2025-29757 vulnerability.

No data.

REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-29757.

URL Resource
https://csirt.divd.nl/CVE-2025-29757 cve-icon cve-icon
https://csirt.divd.nl/DIVD-2025-00011 cve-icon cve-icon
https://oss.growatt.com cve-icon cve-icon
https://server.growatt.com cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Attack Requirements
Privileges Required
User Interaction
VS Confidentiality
VS Integrity
VS Availability
SS Confidentiality
SS Integrity
SS Availability