Growatt Cloud portal Insufficient Type Distinction
An attacker can upload an arbitrary file instead of a plant image.
Exploitability
AV:N
AC:L
AT:N
PR:N
UI:N
Vulnerable System
VC:H
VI:H
VA:H
Subsequent System
SC:N
SI:N
SA:N
9.3/CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Other
CWE-351