Skip to content
OpenAdvisories
High ICSA-23-171-02 1 CVE

Enphase Installer Toolkit Android App

Published Jun 20, 2023 · Updated Jun 20, 2023

Vendor: Enphase Product: Installer Toolkit

Summary

Successful exploitation of this vulnerability could allow sensitive information to be obtained by an attacker using hard-coded credentials.

Vulnerabilities 1

  • High 8.6
    CVE-2023-32274

    Enphase Installer Toolkit Android App Use of Hard-coded Credentials

    Enphase Installer Toolkit versions 3.27.0 has hard coded credentials embedded in binary code in the Android application. An attacker can exploit this and gain access to sensitive information.

    Enphase Enphase Installer Toolkit

Revision history

  1. #1

    Initial Publication

References