Description
Enphase Installer Toolkit versions 3.27.0 has hard coded credentials embedded in binary code in the Android application. An attacker can exploit this and gain access to sensitive information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Enphase | Enphase Installer Toolkit | 3.27.0 | — |
Advisories 1
- ICSA-23-171-02 Enphase Installer Toolkit Android App CISA ICS & IT advisories · Jun 20, 2023