CVE-2020-25755

CVE-2020-25755 affects Enphase Envoy R3.x, D4.x (and other current devices). The issue is in the upgrade_start function (in /installer/upgrade_start), which allows remote authenticated users to execute arbitrary commands via the force parameter. Impact is described as remote command execution wit...

CVE-2020-25754

An issue was discovered on Enphase Envoy R3.x and D4.x devices. There is a custom PAM module for user authentication that circumvents traditional user authentication. This module uses a password derived from the MD5 hash of the username and serial number. The serial number can be retrieved by an...

CVE-2020-25754

CVE-2020-25754 affects Enphase Energy Envoy R3.x and D4.x devices. A custom PAM module for user authentication bypasses standard login by deriving a password from the MD5 hash of the username and serial number, with the serial number obtainable by an unauthenticated user at /info.xml. Attempts to...

CVE-2020-25753

The CVE-2020-25753 entry concerns Enphase Envoy R3.x and D4.x devices running v3 software. The issue arises from a default admin password set to the last 6 digits of the serial number, and the serial number is retrievable by an unauthenticated user at /info.xml. This combination creates a credent...

CVE-2020-25753

An issue was discovered on Enphase Envoy R3.x and D4.x devices with v3 software. The default admin password is set to the last 6 digits of the serial number. The serial number can be retrieved by an unauthenticated user at /info.xml...

CVE-2020-25752

An issue was discovered on Enphase Envoy R3.x and D4.x devices. There are hardcoded web-panel login passwords for the installer and Enphase accounts. The passwords for these accounts are hardcoded values derived from the MD5 hash of the username and serial number mixed with some static strings. T...

CVE-2020-25752

The CVE-2020-25752 entry concerns Enphase Envoy R3.x and D4.x devices with hardcoded web-panel login passwords for the installer and Enphase accounts. The passwords are derived from the MD5 hash of the username and serial number mixed with static strings, and the serial number can be retrieved by...

PT-2021-11177

Name of the Vulnerable Software and Affected Versions: Enphase Envoy versions R3.x and D4.x with v3 software Description: An issue was discovered where the default admin password is set to the last 6 digits of the serial number. The serial number can be retrieved by an unauthenticated user at the...

PT-2021-11179

Name of the Vulnerable Software and Affected Versions: Enphase Envoy versions R3.x and D4.x Description: An issue allows remote authenticated users to execute arbitrary commands via the force parameter in the upgrade start function, accessible through the "/installer/upgrade start" API endpoint...

PT-2021-11178

Name of the Vulnerable Software and Affected Versions: Enphase Envoy versions R3.x and D4.x Description: A custom PAM module for user authentication in Enphase Envoy devices bypasses traditional authentication methods. This module generates a password from the MD5 hash of the username and serial...

PT-2021-11176

Name of the Vulnerable Software and Affected Versions: Enphase Envoy versions R3.x and D4.x Description: An issue was discovered where hardcoded web-panel login passwords for the installer and Enphase accounts are derived from the MD5 hash of the username and serial number mixed with static...

CVE-2020-25754: Use of Password Hash With Insufficient Computational Effort

An issue was discovered on Enphase Envoy R3.x and D4.x devices. There is a custom PAM module for user authentication that circumvents traditional user authentication. This module uses a password derived from the MD5 hash of the username and serial number. The serial number can be retrieved by an...

CVE-2020-25753: Undefined Security Weakness

An issue was discovered on Enphase Envoy R3.x and D4.x devices with v3 software. The default admin password is set to the last 6 digits of the serial number. The serial number can be retrieved by an unauthenticated user at /info.xml...

CVE-2020-25752: Use of Hard-coded Credentials

An issue was discovered on Enphase Envoy R3.x and D4.x devices. There are hardcoded web-panel login passwords for the installer and Enphase accounts. The passwords for these accounts are hardcoded values derived from the MD5 hash of the username and serial number mixed with some static strings. T...

Enphase Energy Envoy 操作系统命令注入漏洞

Enphase Energy Envoy is a gateway device used to connect smart home devices from Enphase Energy, Inc. A command injection vulnerability exists in Enphase Energy Envoy, which originates from the update-start feature in the installer update-start, and can be exploited remotely to execute arbitrary...

Enphase Envoy 安全漏洞

The Enphase Energy Envoy is a gateway device for connecting smart home devices from Enphase Energy USA. The Enphase Envoy suffers from a security vulnerability that stems from a custom PAM module for user authentication that bypasses traditional user authentication, which uses passwords derived...

Enphase Envoy 安全漏洞

The Enphase Energy Envoy is a gateway device for connecting smart home devices from Enphase Energy USA. A security vulnerability exists in the Enphase Energy Envoy. The vulnerability stems from the default admin password being set to the last 6 digits of the serial number. The serial number can b...

CVE-2020-25755: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on Enphase Envoy R3.x and D4.x and other current devices. The upgradestart function in /installer/upgradestart allows remote authenticated users to execute arbitrary commands via the force parameter...

Weak Password Vulnerability in Enphase Envoy

The Enphase Envoy is the home energy control gateway at the heart of the Enphase Energy home energy solution. A weak password vulnerability exists in Enphase Envoy. A remote attacker is allowed to exploit the vulnerability to submit a special request for unauthorized access to the application...

Enphase Envoy Cross-Site Scripting Vulnerability

Enphase Envoy is a smart home referrer. enphase Envoy R3.. /home URI is vulnerable to cross-site scripting, which can be exploited by attackers to inject malicious scripts or HTML code...