142 matches found
CVE-2023-33869-RCE-PoC
에너지 보안 및 신뢰성 센터 - UNC Charlotte CVE-2023-33869는 Enphase Envoy 펌웨어 버전 D7.0.88에 영향을 미치는 명령 삽입 취약점입니다. 이 취약점은 공격자가 영향을 받는 장치에서 루트 권한으로 임의의 명령을 주입 및 실행할 수 있게 합니다. Enphase Envoy는 주거용 및 상업용 태양광 에너지 시스템에 흔히 배포되는 태양광 마이크로인버터 게이트웨이 장치로서, 이 취약점은 중요 인프라 및 IoT 환경에 특히 우려되는 요소입니다...
Envoy 安全漏洞
Envoy is an Enphase open source gateway program for connecting smart home devices. A security vulnerability exists in Envoy versions 1.33.12, 1.34.10, 1.35.6, 1.36.2, and prior versions, which stems from the mTLS certificate matcher incorrectly handling certificates embedded with null bytes, whic...
EUVD-2019-17209
Malware in sbrugna...
EUVD-2019-17210
Malware in sbrugna...
EUVD-2019-17208
Malware in sbrugna...
EUVD-2020-18403
Malware in sbrugna...
EUVD-2020-18404
Malware in sbrugna...
EUVD-2020-18405
Malware in sbrugna...
EUVD-2020-18406
Malware in sbrugna...
EUVD-2023-36528
Malicious code in bioql PyPI...
EUVD-2023-38019
Malicious code in bioql PyPI...
EUVD-2024-19491
Malicious code in bioql PyPI...
EUVD-2024-19490
Malicious code in bioql PyPI...
EUVD-2024-19487
Malicious code in bioql PyPI...
EUVD-2024-19489
Malicious code in bioql PyPI...
EUVD-2024-19488
Malicious code in bioql PyPI...
CVE-2023-33869
Enphase Envoy versions D7.0.88 is vulnerable to a command injection exploit that may allow an attacker to execute root commands...
CVE-2020-25754
An issue was discovered on Enphase Envoy R3.x and D4.x devices. There is a custom PAM module for user authentication that circumvents traditional user authentication. This module uses a password derived from the MD5 hash of the username and serial number. The serial number can be retrieved by an...
CVE-2020-25752
An issue was discovered on Enphase Envoy R3.x and D4.x devices. There are hardcoded web-panel login passwords for the installer and Enphase accounts. The passwords for these accounts are hardcoded values derived from the MD5 hash of the username and serial number mixed with some static strings. T...
CVE-2020-25755
An issue was discovered on Enphase Envoy R3.x and D4.x and other current devices. The upgradestart function in /installer/upgradestart allows remote authenticated users to execute arbitrary commands via the force parameter...