Enphase

Records15All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

Enphase records in CISA KEV

No Enphase vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

5 records in Envoy Firmware · all components

TI-2020-15762 CVE-2020-25753 · GHSA-qpjh-j88q-xpmv

MEDIUM 46

An issue was discovered on Enphase Envoy R3.x and D4.x devices with v3 software.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02231 Published 2021-06-16 No fix listed

TI-2023-16741 CVE-2023-33869 · GHSA-wcfj-m59v-ggwc

MEDIUM 44

Enphase Envoy versions D7.0.88 is vulnerable to a command injection exploit that may allow an attacker to execute root commands.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0107 Published 2023-06-20 No fix listed CWE-78

TI-2020-15764 CVE-2020-25755 · GHSA-4255-c99r-j52r

MEDIUM 44

An issue was discovered on Enphase Envoy R3.x and D4.x (and other current) devices.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03076 Published 2021-06-16 No fix listed CWE-78

TI-2020-15763 CVE-2020-25754 · GHSA-cq4j-2685-h9rw

LOW 36

An issue was discovered on Enphase Envoy R3.x and D4.x devices.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0135 Published 2021-06-16 No fix listed CWE-916

TI-2020-15761 CVE-2020-25752 · GHSA-84r8-qq95-wq5m

LOW 27

An issue was discovered on Enphase Envoy R3.x and D4.x devices.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01603 Published 2021-06-16 No fix listed CWE-798