Vulnerabilities

TI-2023-16741 CVE-2023-33869 · GHSA-wcfj-m59v-ggwc

Enphase Envoy OS Command Injection

MEDIUM 44

Enphase Envoy versions D7.0.88 is vulnerable to a command injection exploit that may allow an attacker to execute root commands.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0107 Published 2023-06-20 No fix listed CWE-78

TI-2020-15764 CVE-2020-25755 · GHSA-4255-c99r-j52r

MEDIUM 44

An issue was discovered on Enphase Envoy R3.x and D4.x (and other current) devices.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03076 Published 2021-06-16 No fix listed CWE-78

TI-2020-15763 CVE-2020-25754 · GHSA-cq4j-2685-h9rw

LOW 36

An issue was discovered on Enphase Envoy R3.x and D4.x devices.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0135 Published 2021-06-16 No fix listed CWE-916

TI-2020-15762 CVE-2020-25753 · GHSA-qpjh-j88q-xpmv

MEDIUM 46

An issue was discovered on Enphase Envoy R3.x and D4.x devices with v3 software.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02231 Published 2021-06-16 No fix listed

TI-2020-15761 CVE-2020-25752 · GHSA-84r8-qq95-wq5m

LOW 27

An issue was discovered on Enphase Envoy R3.x and D4.x devices.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01603 Published 2021-06-16 No fix listed CWE-798