Unauthenticated attackers can retrieve serial number of smart meters associated to a specific user account.
CWE-639