Skip to content
OpenAdvisories
Medium ICSA-23-171-01 1 CVE

Enphase Envoy

Published Jun 20, 2023 · Updated Jul 13, 2023 · Revision 2

Vendor: Enphase Product: Envoy

Summary

Successful exploitation of this vulnerability could allow an attacker to gain root access to the affected product.

Vulnerabilities 1

  • Medium 6.3
    CVE-2023-33869 Public exploit

    Enphase Envoy OS Command Injection

    Enphase Envoy versions D7.0.88 is vulnerable to a command injection exploit that may allow an attacker to execute root commands.

    Enphase Envoy

Revision history

  1. #2

    Update A - Update to mitigation section

  2. #1

    Initial Publication

References