Enphase

Records15All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

Enphase records in CISA KEV

No Enphase vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Envoy · all components

TI-2019-05416 CVE-2019-7678 · GHSA-g9qp-8pvh-p93g

MEDIUM 47

A directory traversal vulnerability was discovered in Enphase Envoy R3.*.* via images/, include/, include/js, or include/css on TCP port 8888.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02486 Published 2019-02-09 No fix listed CWE-22

TI-2019-05414 CVE-2019-7676 · GHSA-mj45-vwww-g6pr

LOW 35

A weak password vulnerability was discovered in Enphase Envoy R3.*.*.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01686 Published 2019-02-09 No fix listed CWE-521

TI-2019-05415 CVE-2019-7677 · GHSA-f9ww-v5mx-p9gf

LOW 29

XSS exists in Enphase Envoy R3.*.* via the profileName parameter to the /home URI on TCP port 8888.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00902 Published 2019-02-09 No fix listed CWE-79