Lucene search

MitreCVE-2019-7676

HistoryFeb 09, 2019 - 10:29 p.m.

CVE-2019-7676

2019-02-0922:29:00

CWE-521

mitre

web.nvd.nist.gov

enphase envoy r3

vulnerability

weak password

tcp port 8888

cve-2019-7676

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.002

Percentile

64.5%

JSON

A weak password vulnerability was discovered in Enphase Envoy R3... One can login via TCP port 8888 with the admin password for the admin account.

Affected configurations

Nvd

Node

enphaseenvoyRange3.0.0–3.9.0

VendorProductVersionCPE
enphaseenvoy*cpe:2.3:a:enphase:envoy:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
enphase	envoy	*	cpe:2.3:a:enphase:envoy::::::::

References

github.com/pudding2/enphase-energy/blob/master/weak_password.txt

github.com/pudding2/enphase-energy/blob/master/weak_password_1.png

github.com/pudding2/enphase-energy/blob/master/weak_password_2.png

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.002

Percentile

64.5%

JSON

Related for CVE-2019-7676