Lucene search
China National Vulnerability DatabaseCNVD-2021-53937HistoryJun 18, 2021 - 12:00 a.m.
Enphase Energy Envoy Command Injection Vulnerability
2021-06-1800:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
enphase energy
command injection
update-start
installer
remote exploitation
arbitrary commands
EPSS
0.02
Percentile
89.1%
Enphase Energy Envoy is a gateway device used to connect smart home devices from Enphase Energy, Inc. A command injection vulnerability exists in Enphase Energy Envoy, which originates from the update-start feature in the installer update-start, and can be exploited remotely to execute arbitrary commands via the force parameter.
Related
cvelist
cvelist
CVE-2020-25755
2021-06-16 18:27:47
cve
cve
CVE-2020-25755
2021-06-16 19:15:32
nvd
nvd
CVE-2020-25755
2021-06-16 19:15:32
prion
prion
Code injection
2021-06-16 19:15:00