58 matches found
CVE-2023-33869-RCE-PoC
에너지 보안 및 신뢰성 센터 - UNC Charlotte CVE-2023-33869는 Enphase Envoy 펌웨어 버전 D7.0.88에 영향을 미치는 명령 삽입 취약점입니다. 이 취약점은 공격자가 영향을 받는 장치에서 루트 권한으로 임의의 명령을 주입 및 실행할 수 있게 합니다. Enphase Envoy는 주거용 및 상업용 태양광 에너지 시스템에 흔히 배포되는 태양광 마이크로인버터 게이트웨이 장치로서, 이 취약점은 중요 인프라 및 IoT 환경에 특히 우려되는 요소입니다...
EUVD-2019-17210
Malware in sbrugna...
EUVD-2020-18404
Malware in sbrugna...
EUVD-2019-17208
Malware in sbrugna...
EUVD-2019-17209
Malware in sbrugna...
EUVD-2020-18405
Malware in sbrugna...
EUVD-2020-18403
Malware in sbrugna...
EUVD-2020-18406
Malware in sbrugna...
EUVD-2023-38019
Malicious code in bioql PyPI...
CVE-2023-33869
Enphase Envoy versions D7.0.88 is vulnerable to a command injection exploit that may allow an attacker to execute root commands...
CVE-2020-25754
An issue was discovered on Enphase Envoy R3.x and D4.x devices. There is a custom PAM module for user authentication that circumvents traditional user authentication. This module uses a password derived from the MD5 hash of the username and serial number. The serial number can be retrieved by an...
CVE-2020-25752
An issue was discovered on Enphase Envoy R3.x and D4.x devices. There are hardcoded web-panel login passwords for the installer and Enphase accounts. The passwords for these accounts are hardcoded values derived from the MD5 hash of the username and serial number mixed with some static strings. T...
CVE-2020-25755
An issue was discovered on Enphase Envoy R3.x and D4.x and other current devices. The upgradestart function in /installer/upgradestart allows remote authenticated users to execute arbitrary commands via the force parameter...
Enphase Envoy 安全漏洞
Enphase Envoy is a gateway device for connecting smart home devices from Enphase USA. A security vulnerability exists in Enphase Envoy version 4.x up to and including version 8.2.4225, which stems from the inclusion of a path traversal vulnerability...
Enphase Envoy 安全漏洞
Enphase Envoy is a gateway device for connecting smart home devices from Enphase USA. A security vulnerability exists in Enphase Envoy version 4.x up to and including version 8.2.4225, which stems from the inclusion of a path traversal vulnerability...
CISA Releases Nine Industrial Control Systems Advisories
CISA released nine Industrial Control Systems ICS advisories on July 13, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-23-194-01 Siemens RUGGEDCOM ROX ICSA-23-194-02 Siemens SiPass Integrated ICSA-23-194-03...
CVE-2023-33869
Enphase Envoy versions D7.0.88 is vulnerable to a command injection exploit that may allow an attacker to execute root commands...
CVE-2023-33869
Enphase Envoy versions D7.0.88 is vulnerable to a command injection exploit that may allow an attacker to execute root commands...
