Skip to content
OpenAdvisories

Vendor

Enphase

8 known vulnerabilities.

Products

Envoy 6 Enphase Installer Toolkit 1 IQ Gateway 1 Installer Toolkit 0
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.2
    CVE-2024-21876

    Unauthenticated Path Traversal via URL Parameter in Enphase IQ Gateway version < 8.2.4225

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability via a URL parameter in Enphase IQ Gateway (formerly known as Envoy) allows an unautheticated attacker to access or create arbitratry files.This issue affects Envoy: f…

    Enphase IQ Gateway
  • Critical 9.2
    CVE-2024-21877

    Insecure File Generation Based on User Input in Enphase IQ Gateway version 4.x to 8.x and < 8.2.4225

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability through a url parameter in Enphase IQ Gateway (formerly known as Envoy) allows File Manipulation. The endpoint requires authentication.This issue affects Envoy: from …

    Enphase Envoy
  • Critical 9.2
    CVE-2024-21878

    Command Injection through Unsafe File Name Evaluation in internal script in Enphase IQ Gateway v4.x to and including 8.x

    Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Enphase IQ Gateway (formerly known as Envoy) allows OS Command Injection. This vulnerability is present in an internal script.This issue affects Envoy: from 4…

    Enphase Envoy