Enphase vulnerabilities

Products

• Envoy 10
• Envoy Firmware 5
• Iq Gateway Firmware 5

Newest

• enphase envoy, iq gateway, iq gateway firmware +2 more Unauthenticated Path Traversal via URL Parameter in Enphase IQ Gateway version < 8.2.4225 CVE-2024-21876 9.3 CriticalAugust 10, 2024
• enphase envoy, iq gateway firmware +1 more URL parameter manipulations allows an authenticated attacker to execute arbitrary OS commands in Enphase IQ Gateway v4.x to v8.x and < v8.2.4225 CVE-2024-21879 8.7 HighAugust 10, 2024
• enphase envoy, iq gateway firmware +1 more Insecure File Generation Based on User Input in Enphase IQ Gateway version 4.x to 8.x and < 8.2.4225 CVE-2024-21877 8.6 HighAugust 10, 2024
• enphase envoy Upload of encrypted packages allows authenticated command execution in Enphase IQ Gateway v4.x and v5.x CVE-2024-21881 8.6 HighAugust 10, 2024
• enphase envoy, iq gateway firmware +1 more URL parameter manipulations allows an authenticated attacker to execute arbitrary OS commands in Enphase IQ Gateway version 4.x <= 7.x CVE-2024-21880 8.6 HighAugust 10, 2024
• enphase envoy, iq gateway firmware +1 more Command Injection through Unsafe File Name Evaluation in internal script in Enphase IQ Gateway v4.x to and including 8.x CVE-2024-21878 7.1 HighAugust 10, 2024
• enphase envoy, envoy firmware +1 more Enphase Envoy OS Command Injection CVE-2023-33869 Public exploit 6.3 MediumJune 20, 2023
• enphase installer toolkit Enphase Installer Toolkit Android App Use of Hard-coded Credentials CVE-2023-32274 8.6 HighJune 20, 2023
• enphase envoy firmware An issue was discovered on Enphase Envoy R3.x and D4.x (and other current) devices. The... CVE-2020-25755 8.8 HighJune 16, 2021
• enphase envoy firmware An issue was discovered on Enphase Envoy R3.x and D4.x devices. There is a custom PAM module for... CVE-2020-25754 7.5 HighJune 16, 2021
• enphase envoy firmware An issue was discovered on Enphase Envoy R3.x and D4.x devices with v3 software. The default... CVE-2020-25753 9.8 CriticalJune 16, 2021
• enphase envoy firmware An issue was discovered on Enphase Envoy R3.x and D4.x devices. There are hardcoded web-panel... CVE-2020-25752 5.3 MediumJune 16, 2021
• enphase envoy A directory traversal vulnerability was discovered in Enphase Envoy R3.*.* via images/, include/,... CVE-2019-7678 9.8 CriticalFebruary 9, 2019
• enphase envoy XSS exists in Enphase Envoy R3.*.* via the profileName parameter to the /home URI on TCP port 8888. CVE-2019-7677 6.1 MediumFebruary 9, 2019
• enphase envoy A weak password vulnerability was discovered in Enphase Envoy R3.*.*. One can login via TCP port... CVE-2019-7676 7.2 HighFebruary 9, 2019