CVE-2024-21879High 8.7URL parameter manipulations allows an authenticated attacker to execute arbitrary OS commands in Enphase IQ Gateway v4.x to v8.x and < v8.2.42252.5%
CVE-2024-21877High 8.6Insecure File Generation Based on User Input in Enphase IQ Gateway version 4.x to 8.x and < 8.2.42250.8%
CVE-2024-21878High 7.1Command Injection through Unsafe File Name Evaluation in internal script in Enphase IQ Gateway v4.x to and including 8.x1.4%
CVE-2024-21880High 8.6URL parameter manipulations allows an authenticated attacker to execute arbitrary OS commands in Enphase IQ Gateway version 4.x <= 7.x2.4%
CVE-2024-21881High 8.6Upload of encrypted packages allows authenticated command execution in Enphase IQ Gateway v4.x and v5.x0.3%
CVE-2023-33869Medium 6.3Enphase Envoy OS Command Injection1.1%