58 matches found
CVE-2023-33869-RCE-PoC
能源安全与可靠性中心 - UNC Charlotte CVE-2023-33869 是一个命令注入漏洞，影响 Enphase Envoy 固件版本 D7.0.88。该漏洞允许攻击者在受影响设备上以 root 权限注入并执行任意命令。Enphase Envoy 是一种太阳能微型逆变器网关设备，通常部署在住宅和商业太阳能系统中，这使得该漏洞对关键基础设施和物联网环境尤其令人担忧。...
EUVD-2019-17210
Malware in sbrugna...
EUVD-2020-18404
Malware in sbrugna...
EUVD-2019-17208
Malware in sbrugna...
EUVD-2019-17209
Malware in sbrugna...
EUVD-2020-18405
Malware in sbrugna...
EUVD-2020-18403
Malware in sbrugna...
EUVD-2020-18406
Malware in sbrugna...
EUVD-2023-38019
Malicious code in bioql PyPI...
CVE-2023-33869
Enphase Envoy versions D7.0.88 is vulnerable to a command injection exploit that may allow an attacker to execute root commands...
CVE-2020-25754
An issue was discovered on Enphase Envoy R3.x and D4.x devices. There is a custom PAM module for user authentication that circumvents traditional user authentication. This module uses a password derived from the MD5 hash of the username and serial number. The serial number can be retrieved by an...
CVE-2020-25752
An issue was discovered on Enphase Envoy R3.x and D4.x devices. There are hardcoded web-panel login passwords for the installer and Enphase accounts. The passwords for these accounts are hardcoded values derived from the MD5 hash of the username and serial number mixed with some static strings. T...
CVE-2020-25755
An issue was discovered on Enphase Envoy R3.x and D4.x and other current devices. The upgradestart function in /installer/upgradestart allows remote authenticated users to execute arbitrary commands via the force parameter...
Enphase Envoy 安全漏洞
Enphase Envoy is a gateway device for connecting smart home devices from Enphase USA. A security vulnerability exists in Enphase Envoy version 4.x up to and including version 8.2.4225, which stems from the inclusion of a path traversal vulnerability...
Enphase Envoy 安全漏洞
Enphase Envoy is a gateway device for connecting smart home devices from Enphase USA. A security vulnerability exists in Enphase Envoy version 4.x up to and including version 8.2.4225, which stems from the inclusion of a path traversal vulnerability...
CISA Releases Nine Industrial Control Systems Advisories
CISA released nine Industrial Control Systems ICS advisories on July 13, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-23-194-01 Siemens RUGGEDCOM ROX ICSA-23-194-02 Siemens SiPass Integrated ICSA-23-194-03...
CVE-2023-33869
Enphase Envoy versions D7.0.88 is vulnerable to a command injection exploit that may allow an attacker to execute root commands...
CVE-2023-33869
Enphase Envoy versions D7.0.88 is vulnerable to a command injection exploit that may allow an attacker to execute root commands...
