Lucene search

[email protected]NVD:CVE-2019-7676

HistoryFeb 09, 2019 - 10:29 p.m.

CVE-2019-7676

2019-02-0922:29:00

CWE-521

[email protected]

web.nvd.nist.gov

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

High

EPSS

0.002

Percentile

64.5%

JSON

A weak password vulnerability was discovered in Enphase Envoy R3... One can login via TCP port 8888 with the admin password for the admin account.

Affected configurations

Nvd

Node

enphaseenvoyRange3.0.0–3.9.0

VendorProductVersionCPE
enphaseenvoy*cpe:2.3:a:enphase:envoy:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
enphase	envoy	*	cpe:2.3:a:enphase:envoy::::::::

References

github.com/pudding2/enphase-energy/blob/master/weak_password.txt

github.com/pudding2/enphase-energy/blob/master/weak_password_1.png

github.com/pudding2/enphase-energy/blob/master/weak_password_2.png

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

High

EPSS

0.002

Percentile

64.5%

JSON

Related for NVD:CVE-2019-7676

cve1 prion1 cvelist1