Log in Start free

Enphase

Products

ProductCVEsExploitedLatest
Envoy6–Aug 10, 2024
Enphase Installer Toolkit1–Jun 20, 2023
IQ Gateway1–Aug 10, 2024

Exploited and recent CVEs

  • CVE-2024-21876 Critical 9.3 Unauthenticated Path Traversal via URL Parameter in Enphase IQ Gateway version < 8.2.4225 0.8%
  • CVE-2024-21879 High 8.7 URL parameter manipulations allows an authenticated attacker to execute arbitrary OS commands in Enphase IQ Gateway v4.x to v8.x and < v8.2.4225 2.5%
  • CVE-2024-21877 High 8.6 Insecure File Generation Based on User Input in Enphase IQ Gateway version 4.x to 8.x and < 8.2.4225 0.8%
  • CVE-2024-21878 High 7.1 Command Injection through Unsafe File Name Evaluation in internal script in Enphase IQ Gateway v4.x to and including 8.x 1.4%
  • CVE-2024-21880 High 8.6 URL parameter manipulations allows an authenticated attacker to execute arbitrary OS commands in Enphase IQ Gateway version 4.x <= 7.x 2.4%
  • CVE-2024-21881 High 8.6 Upload of encrypted packages allows authenticated command execution in Enphase IQ Gateway v4.x and v5.x 0.3%
  • CVE-2023-33869 Medium 6.3 Enphase Envoy OS Command Injection 1.1%
  • CVE-2023-32274 High 8.6 Enphase Installer Toolkit Android App Use of Hard-coded Credentials 0.6%