Vulnerabilities

TI-2019-05416 CVE-2019-7678 · GHSA-g9qp-8pvh-p93g

A directory traversal vulnerability was discovered in Enphase Envoy R3.. via images/…

MEDIUM 47

A directory traversal vulnerability was discovered in Enphase Envoy R3.*.* via images/, include/, include/js, or include/css on TCP port 8888.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02486 Published 2019-02-09 No fix listed CWE-22

TI-2019-05415 CVE-2019-7677 · GHSA-f9ww-v5mx-p9gf

LOW 29

XSS exists in Enphase Envoy R3.*.* via the profileName parameter to the /home URI on TCP port 8888.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00902 Published 2019-02-09 No fix listed CWE-79

TI-2019-05414 CVE-2019-7676 · GHSA-mj45-vwww-g6pr

LOW 35

A weak password vulnerability was discovered in Enphase Envoy R3.*.*.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01686 Published 2019-02-09 No fix listed CWE-521