Enphase Envoy vulnerabilities
6 published CVEs name Enphase Envoy among the affected products.
- Published CVEs
- 6
- Last 12 months
- 0
- Critical
- 0
- Known exploited
- 0
Critical 0High 5Medium 1Low 0Not scored 0
CVEs per yearBy the year they were published
- 20231
- 20245
Newest CVEs
- CVE-2024-21879
URL parameter manipulations allows an authenticated attacker to execute arbitrary OS commands in Enphase IQ Gateway v4.x to v8.x and < v8.2.4225
Enphase · Envoy
High8.7 - CVE-2024-21877
Insecure File Generation Based on User Input in Enphase IQ Gateway version 4.x to 8.x and < 8.2.4225
Enphase · Envoy
High8.6 - CVE-2024-21878
Command Injection through Unsafe File Name Evaluation in internal script in Enphase IQ Gateway v4.x to and including 8.x
Enphase · Envoy
High7.1 - CVE-2024-21880
URL parameter manipulations allows an authenticated attacker to execute arbitrary OS commands in Enphase IQ Gateway version 4.x <= 7.x
Enphase · Envoy
High8.6 - CVE-2024-21881
Upload of encrypted packages allows authenticated command execution in Enphase IQ Gateway v4.x and v5.x
Enphase · Envoy
High8.6 - CVE-2023-33869
Enphase Envoy OS Command Injection
Enphase · Envoy
Medium6.3